Documentation is now available for the Fall 2020 Update release!

Duo Security

Describes how to configure Duo security.

Leave Feedback

Introduction

OpsRamp uses multiple mechanisms for user authentication and data security. Enabling Duo security requires configuration at Duo as well as OpsRamp.

Prerequisite

  • Partners must register with OpsRamp to receive OpsRamp login credentials.
  • Provide your custom branding URL (such as <yourwebsitename>.opsramp.com).

Duo configuration

  1. Log into duo.com
  2. Go to Applications > Protect an Application. Protect an Application page lists the different types of services you can protect with Duo Security.
  3. From the list of applications, search for Web SDK, and click Protect this application.
  4. From the Web SDK application properties screen, make note of the Integration key (ikey), Secret key (skey), and API hostname.
    You’ll need these keys and hostname when configuring OpsRamp to work with Duo Security.
    • The integration key and secret key uniquely identify a specific application to Duo Security.
    • The API hostname is unique to your account.

OpsRamp configuration

Once you have completed the configurations in Duo.com, you can continue with the next set of configurations in the OpsRamp console.

To enable Duo security:

  1. Go to Setup > Accounts > Clients.

  2. From CLIENTS, click the desired client name that requires Duo Security activation.

  3. From CLIENT DETAILS, click Authentication Mechanism.

  4. From Authentication Mechanism, click Enable to activate two-factor authentication and Yes to enable Duo Security.

  5. Provide the following information (provided in the Duo application):

    • Integration key (ikey)
    • Secret key (skey)
    • API hostname
  6. Click Save. All client users can activate Duo security from their end.

Activate Duo security for a partner user

To activate Duo security for a partner user:

  1. Click on a partner name to activate Duo Security. The Partner details page opens.
  2. Select the option Duo Security MFA Configuration.
  3. Enter Integration key (ikey), Secret key (skey), API hostname and then click Save. Now, the partner user can activate Duo Security from their end.

Register mobile number for Duo security

The Duo Security option is available only if Duo Security is enabled for the user.

  1. Select Duo Security.
  2. Follow the Wizard and register your mobile number. Once you successfully register your mobile number, the Duo Security is activated on your account.

External reference