Duo
- Updated on 05 Feb 2020
- 1 minute to read
-
Contributors
-
Print
-
DarkLight
Why enable Duo MFA?
Configuring Duo MFA
1. Log into CultureAI and navigate to security settings
Log into CultureAI at: https://platform.culture.ai
Then, navigate to: Configure Programme > Your Organisation > Security Settings
2. Turn on MFA
Click the grey toggle button next to ‘Require Multi-factor Authentication (MFA) for stakeholders’.
This will load the MFA setup wizard:
)
3. Select 'Duo' then 'Next'
Select Duo from the drop-down in the 'Choose MFA' section and click 'Next'.
4. Open a new tab, log into Duo
In a new tab, log in to your Duo admin platform: https://admin.duosecurity.com/login
5. Navigate to 'Applications' > 'Protect an Application'
In the left-hand navigation menu in Duo, click ‘Applications’ then select ‘Protect an Application’:
)
6. Find 'Web SDK' and click 'Protect this Application'
In the applications list, find ‘Web SDK’ and then click ‘Protect this application’.
)
7. Set the name to 'CultureAI' & save
In the settings section set the name to ‘CultureAI’. Click ‘Save’.
)
8. Copy the Integration Key, Secret Key and API hostname from Duo into the CultureAI platform
In the ‘Details’ section of the application page in Duo, find your integration key, secret key and API hostname for the application you just created.
)
Copy these details into the form in the wizard on the CultureAI platform.
)
Click 'Save Changes'
Duo is now configured! All stakeholders will now need to use Duo when logging into the platform.
Testing Duo MFA
1. Log out of the CultureAI platform
Log out of the CultureAI platform by clicking on the profile icon in the bottom left, then clicking 'Log out'
2. Log back into the platform using your normal credentials
Log into CultureAI at https://platform.culture.ai using your normal login credentials.
)
3. Choose a Duo authentication method
Choose your authentication method, ideally ‘Send Me a Push’.
)
4. Accept the auth request on your mobile device
Accept the Duo authentication notification on your mobile device. You'll see a 'success' notification briefly.
)
Before being successfully logged into the security culture management system.
