Duo Security Adapter settings reference

Field descriptions for the Duo Security IdP Adapter configuration screen.

Field Description

Integration Key

The integration key that you noted in Getting your Duo Security keys and API hostname.

Secret Key

The secret key that you noted in Getting your Duo Security keys and API hostname.

API Host

The API hostname that you noted in Getting your Duo Security keys and API hostname.

Session State

Determines whether this Duo Security Adapter instance maintains adapter sessions and shares adapter sessions with other Duo Security Adapter instances.

Globally: Adapter sessions from this Duo Security Adapter instance are shared among other Duo Security Adapter instances that have Session State set to Globally.
None: This Duo Security Adapter does not maintain adapter sessions for this Duo Security Adapter instance.

If you intend to enable PingFederate authentication sessions globally or individually for this adapter instance, select None. You can find more information about PingFederate authentication sessions in Sessions in the PingFederate documentation.

The default selection is None.

Session Timeout

The amount of time in minutes of inactivity that a session is valid. A value of 0 disables the timeout. Applies only when Session State is set to Globally.

The default value is 60.

Login Template

The filename of the Duo Security login template. You can use this to replace the provided template with your own.

The custom template must be in <pf_install>/pingfederate/default/conf/template.

The default value is duo.form.login.template.html.

Failmode

When Duo Security is unavailable or an error occurs, this setting determines whether the user’s sign-on attempt should fail or continue.

Select secure to deny all sign-on attempts when Duo Security is unavailable.

Select safe to allow all sign-on attempts when Duo Security is unavailable.

The default selection is secure.