Already a NinjaOne customer? Log in to view more guides and the latest updates.

NinjaOne Integrations: Duo MFA for Login Security

Topic

This article explains how to enable the integration between NinjaOne and Duo Security's multi-factor authentication (MFA) tool. 

Environment

  • NinjaOne Integrations
  • Cisco Duo

Description

NinjaOne has integrated with Duo to add an MFA option during identity authentication at login or while performing administrative actions within the platform. In addition to configuring a Web SDK application for your account, you should also consider provisioning users and updating policies to control how the end user interacts with Duo MFA when they log into NinjaOne. 

NinjaOne's integration with Duo does not support MFA bypass. To learn more about MFA bypass compatibility, refer to Enable Conditional NinjaOne Multifactor Authentication Bypass (IDP)

Prerequisite: Prepare the Duo Account for Integration

Configure the Web SDK Application

Before you can enable the integration in NinjaOne, you must configure a Web SDK application in Duo. 

  1. Log in to your Duo account and access Applications. 

Duo login_applications.png
Figure 1: Configure the Web SDK application in Duo

  1. Click Protect an application
  2. Create a new application and use the following table to complete the applicable fields. 
FieldData
Application nameProvide a unique identifier of your choice
Application Type"Web SDK"
User access"Enable for all users"
DetailsThis data will automatically populate when the application is set up. Copy the data for Client ID, Client secret, and API hostname and save it in a safe place for use in the following section. 
If you select "Enable only for permitted groups" for User access, you will need to select the groups of users who will be allowed to log in.

duo_web sdk app.png
Figure 2: Copy the application details in Duo

Enable the Integration

To enable the Duo integration in NinjaOne, perform the following steps: 

  1. In NinjaOne, navigate to AdministrationAppsInstalled. Click Add app and select Duo MFA. 
  2. On the Duo MFA configuration page, click Enable

enable duo mfa.png
Figure 3: Enable the Duo integration app in NinjaOne

  1. Enter the information you obtained from the previous section into the applicable fields. 
  2. Click Enable. 

When the integration is successful, the Status will reflect "Connected." 

Duo_status connected.png
Figure 4: Confirm successful integration status in NinjaOne

Activate Duo MFA for User Accounts

When you configure an MFA option for users in NinjaOne, it will appear as an option on the login screen. If a user does not have any MFA settings applied and Duo is enabled, they can configure Duo as an MFA method when they first log in. 

  1. In NinjaOne, open the end user or technician account. In the General section, open the Security tab.
  2. You can now find Duo as an option; click Configure. 

user_security_duo.png
Figure 5: Configure use of Duo MFA in the NinjaOne user account (click to enlarge)

  1. You will be redirected to your Duo account; log in to complete the configuration. 
You can now select Duo as an MFA option when logging in to NinjaOne. You can further manage your security settings at AdministrationAccountsSecurity Settings. 

Additional Resources

Refer to Integrations and Third-Party Apps: Resource Catalog to learn more about NinjaOne's integrations. 

FAQ

Next Steps