Under Auth API, in the Integration key field, Enter the Integration Key copied in the Prerequisite Prerequisite step 7.Optional (only to be followed if configuring Auth API): In the Username Pattern field, select the attributes whose combined value matches the corresponding Duo account name of the users.

In the API hostname field, Enter the API Hostname copied in the Prerequisite Prerequisite step 4.In the Security key field, Enter the Secret Key copied in the Prerequisite Prerequisite step 4.Under Web SDK, in the Integration key field, Enter the Integration Key copied in the Prerequisite step 4.You need to select at least one self-service feature. Click Select OUs/Groups, and make the selection based on your requirements. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy. The token has been added to your account and shows in the list of options.Note: ADSelfService Plus allows you to create OU and group-based policies. Once you do this you should see the 'Touch your security key' prompt shown above.

To get around this, click 'More Choices' and then the person silhouette icon. Note if you are using a Safeguard encrypted computer you may see a prompt for username and password. Plug your WebAuthn/U2F token into your computer if you haven't already. Select 'Security Key' and click 'Continue'. Note you will be prompted for Duo at this point even if you just did Duo in step 1. If you are prompted for username and password, follow these steps: Step AĬomplete Duo authentication using one of your current methods.Ĭomplete Duo authentication. If you are already logged in to VandalWeb or OWA, you likely won't have to enter your username and password and can skip to Step 2. Open one of Chrome, Firefox, Safari, or the new Microsoft Edge browser and navigate to. This article covers how to add a WebAuthn/U2F token to your Duo account from a Windows computer. NOTE: Duo no longer supports U2F but they can usually be added as WebAuthn devices. Common WebAuthn/U2F tokens include those from Yubikey, Fetian, and Google Titan. WebAuthn/U2F tokens are physical hardware devices which can be used to complete multifactor authentication and usually connect to your computer via a USB port but some use Bluetooth.

Duo with yubikey