If you do not receive the authentication prompt on the phone, first check the following things. A deny from the phone returns an Invalid credential, please retry message.Credentials are verified first so bad credentials return an Invalid credential, please retry message.Below are application notification examples that are received on the mobile device ( Figure 2 & 3).įigure 2: (English Only) Application notification exampleįigure 3: (English Only) Application Full Screen Example Notes on ThinOS Authentication Behavior with DUO Enabled ************************************************ ThinOS Authentication Method NoteĭUO MFA has only been tested against and known to be working with the application push method. TimeZoneName="Central" DayLightName="Central"ĪddCertificate="CA Root Cert Xen712_citrix.cer" Timeserver=192.5.41.40 TimeFormat="12-hour format" DateFormat=mm/dd/yyyy Below is an example of a configuration from a lab environment. There is no special configuration that is required on the ThinOS side to support DUO MFA Push Authentication. Host=192.168.10.10 (Active Directory Server IP or Name)Īpi_host= (The API Host and Keys are account specific and retrieved through your DUO Portal ( Figure 1).)įigure 1: (English Only) DUO API Host and Keys Other configurations may or may not work. This is a validated configuration from a lab environment. A working example of that file is mentioned below. DUO AuthProxy.cfg FileĪs part of the above setup you create, or modify an AuthProxy.cfg file that defines the settings for the DUO RADIUS proxy. If you have not done so, you can find the Citrix NetScaler setup instructions for DUO at. Instructions in this knowledge base article assume that you have already configured Citrix NetScaler for MFA. Configuring Citrix NetScaler for DUO MFA.
0 kommentar(er)
