Skip to main content

Adding DUO authentication to Bravura Security Fabric

You can integrate DUO authentication in Bravura Security Fabric by configuring a custom authentication chain, using the agent.pss authentication module with the DUO Authentication connector agtduo , to perform a challenge response operation.

The following steps demonstrate how to integrate DUO authentication in Bravura Security Fabric :

  1. Add the DUO Authentication target system .

  2. Add a new custom authentication chain:

    1. Add the Connector package agent (agent.pss) module to the chain.

    2. In the module’s settings:

      • Set Target system to use for address and credentials to the target you created.

      • Set Password verification operation to ”Challenge response authentication”.

    3. Enable the custom authentication chain.

  3. Add the new custom authentication chain to the DEFAULT_LOGIN chain:

    1. Click Policies > Authentication chains > Front-end login.

    2. Disable the chain so that you can edit it.

    3. Edit the select_chain module to add the new custom authentication chain to the list of Available chains.

    4. Update and enable the DEFAULT_LOGIN chain.

  4. Test the authentication by logging in as an end user associated with the target system.

    You will be prompted for the DUO authentication methods that are available for the user and will depend on what the user has registered on the DUO Authentication server.

    Here are a few examples of some of the available authentication methods that may be presented to the user:

    • Phone call to authenticate from a key press

    • SMS text message for a passcode

    • Passcode from the Duo Mobile app

    • Push notification to accept or deny from the Duo Mobile app

In this section: