Configure Duo Security for Two-Factor Authentication with Omnissa Access

You can configure Duo Security authentication in Omnissa Access to be the second source of authentication when users access their resources in the Workspace ONE Intelligent Hub app.

To use Duo Security authentication with Omnissa Access, you must have an account in Duo. To prepare the Omnissa Access service to work with Duo two-factor authentication, you log in to your Duo account and add Omnissa Access as a new Web SDK application.

When Omnissa Access is added as a Web SDK application in Duo, Duo generates information that is required to enable Duo authentication in the Omnissa Access console. Copy the integration key, secret key, and API host name from the Details section of the Web SDK page.

In addition to adding the Duo configuration information in the Omnissa Access console, you select the user name format to use to look up users in Duo. The format can be the user name or email address. Make sure that the user name or email address in the Duo user accounts match the user name or email address in the Omnissa Access directory. Otherwise authentication with Duo fails.

Note: If more than one domain is configured in your Omnissa Access environment or if multiple users have the same name, select the email address as the user name format.

When Duo is configured as the second authentication method, Duo manages the end user's experience after they are authenticated in the Omnissa Access service.

• Users must be enrolled into the Duo Security service to use DUO multi-factor authentication. If a user is not enrolled when they log in, after the Omnissa Access service is used to authenticate them, users are redirected to the Duo login page to self-enroll. Users are guided through the Duo installation and configuration process.
• After users are enrolled in Duo, when users sign in, Omnissa Access authenticates the user. Duo sends a sign-in request to the user’s device. The user responds to the Duo request and is authenticated.

Prerequisites

• An Omnissa Access account created in the Duo Security service.
• Copy the following information from the Duo Web SDK page.
  • Integration key
  • Secret key
  • API host name
• Determine the user name format to use, either user name or email address.

Procedure

1. In the Omnissa Access console Integrations > Authentication Methods page, select Duo Security.

   1. Click CONFIGURE and configure the Duo Security settings.

      Enable Duo Security	Enable Duo Security authentication.
      Integration Key	Enter the integration key from the Duo.Web SDK page. The integration key with the secret key uniquely identifies Omnissa Access to Duo.
      Secret Key	Enter the secret key from Duo Web SDK page.
      API Host Name	Enter the API host name from the Duo Web SDK page. The API host name is unique to your Omnissa Access account in Duo. The host name is used to verify user identities.
      Username Format	Select either username or email address as the user name format that to use to look up users in Duo.
      Duo Authentication Timeout (sec)	Omnissa Access manages when the response to the Duo authentication request expires in the Omnissa Access service. Enter the time in seconds to wait for a response. The timeout setting can be set from 30 and 180 seconds. The default is 120 seconds.

   2. Click SAVE.

2. Navigate to Identity Providers and select the Built-In identity provider.

   1. In the Authentication Methods section, select Duo Security.

   2. Click Save.

What to do next

Create the access policy rule to use Duo Security as the second authentication method for two-factor authentication in the Omnissa Access service.