IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  ISAM integration with Duo Mobile MFA

    Posted Wed March 27, 2019 01:39 PM
    I want to implement Duo Mobile MFA with ISAM? Any suggestions how this can be done?

    ------------------------------
    Venkat
    ------------------------------


  • 2.  RE: ISAM integration with Duo Mobile MFA

    Posted Wed March 27, 2019 01:46 PM
    [Pasting my answer from IBM Developer Answers]

    Hello there,

    I just have to ask (since this is an IBM page and I am an IBMer ;-): have you looked at IBM Cloud Identity Verify (CIV) for your MFA requirements? CIV is a cloud-based Authentication-as-a-Service solution from IBM Security which comes with pre-built integration with ISAM for both MFA itself and MFA self-registration.

    If you must use Duo then integration would most likely be achieved by writing a custom JavaScript module in the ISAM Advanced Access Control Authentication Service. An HTTP Client helper class is available in this context which would be used for calling Duo REST APIs. It shouldn't be too hard for a JavaScript developer to handle.

    Alternatively you could write a complete web application to manage the login interaction with Duo and integrate that with Access Manager using "External Authentication Interface" (EAI).

    I don't have any resources specific to Duo integration. If you do need that then hopefully someone else will step in.

    You might find something useful on IBM Security Learning Academy: https://www.securitylearningacademy.com/local/navigator/index.php?level=iaam01

    Cheers... Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


  • 3.  RE: ISAM integration with Duo Mobile MFA

    Posted Thu March 28, 2019 02:11 AM
    As Jon mentioned, it is recommended to use IBM Verify Mobile App with Cloud Identity Verify (CIV) and ISAM. This provides compatible functionality to DUO as an IBM product.

    ------------------------------
    Vernon Jackson
    ------------------------------

    Original Message


  • 4.  RE: ISAM integration with Duo Mobile MFA

    Posted Sun March 31, 2019 12:59 PM
    Hi Jon,
    We are looking for the below authentication methods. Does IBM Verify or IBM Cloud Identity offer these?

    1. Push
    2. Call back
    3. SMS
    4. E-Mail

    ------------------------------
    Venkat
    ------------------------------

    Original Message


  • 5.  RE: ISAM integration with Duo Mobile MFA

    Posted Sun March 31, 2019 02:05 PM
    Edited by Jon Harry Sun March 31, 2019 02:09 PM
    Hi Venkat,

    IBM Cloud Identity Verify can support PUSH, Email OTP, SMS OTP, and Time-Based OTP (TOTP).

    It does not support callback today.

    If you want to try it out, a free trial of Cloud Identity is available.

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


Related Content