Duo Additional Properties – Fischer Identity Support Center

Duo additional properties allows administrators to configure the available authentication devices upon enrollment by the authentication methods that are allowed for the end user. The administrator may also control emergency bypass code configurations from the additional properties page.

Authentication Methods

Duo authentication methods will limit the options of available devices from the add new device popup in the Manage Security tab based on the applicable authentication methods of each device. If any of the authentication methods for the device type is enabled then the device type will be displayed as an available option to end users.

Authentication Device	Duo Push	Duo Mobile Passcodes	Phone Callback	SMS Passcodes	Security Key	Hardware Token
Mobile Phone	✓	✓	✓	✓
Tablet	✓	✓
Landline			✓
Security Key					✓
Hardware Token						✓

If a user qualifies for more than one authentication rule with a different set of available devices then the user will be able to select from a merged set of devices. For example, a user that qualifies for a federation authentication rule that allows them to register mobile phone devices and tablets and also qualifies for a secondary authentication rule that allows for hardware tokens only, then the user may select from either a mobile phone, tablet, or hardware token device.

Version

Duo Authentication Methods are available from version 7.5.0

Previous versions will assume all device types are available to the end user. Upgrading from an older version than 7.5.0 will automatically enable all authentication options on upgrade.

*Note: In order to also limit the options available in the iFrames from Identity Claim and Kiosk pages the same options should be copied in the Duo Server as shown below.

Warning

Fischer cannot update the Duo Server configurations for you as your Duo instance is protected by you and Fischer does not have administrative access to it.

Bypass Code Configurations

Emergency bypass codes may be configured from the additional properties page so that users that have forgotten their devices may use an temporary alternative authentication method to sign in.

Please refer to page Emergency Bypass Codes for details.