IBM Security Verify

 View Only
Expand all | Collapse all

Implementing Duo MFA in ISVA

  • 1.  Implementing Duo MFA in ISVA

    Posted Mon November 20, 2023 11:17 AM

    Hi, is it possible to implement MFA using DUO in ISAM/ISVA product?  Please confirm.  Any information/pointers most welcome/appreciated.

    Thanks!



    ------------------------------
    Narayan Verma
    ------------------------------


  • 2.  RE: Implementing Duo MFA in ISVA

    Posted Tue November 21, 2023 12:30 AM

    Yes you can do this with a custom InfoMap authentication mechansim. No I don't have one written. If you know the Duo APIs for transaction "kickoff" and "polling" to check if the transaction has been approved or not, then it would be fairly easy to implement. 



    ------------------------------
    Shane Weeden
    IBM
    ------------------------------



  • 3.  RE: Implementing Duo MFA in ISVA

    Posted Tue November 21, 2023 10:00 AM

    Thank you Shane!  Any pointers to get started with the essential InfoMap concepts that can help with this?

    Thanks!



    ------------------------------
    Narayan Verma
    ------------------------------



  • 4.  RE: Implementing Duo MFA in ISVA

    Posted Tue November 21, 2023 02:01 PM

    Perhaps start here:  https://community.ibm.com/community/user/security/blogs/shane-weeden1/2016/11/29/an-introduction-to-the-infomap-authentication-mech

    Also Google around for more, including within my blog ibm.biz/sweeden

    if you're able to provide the equivalent curl commands to the APIs you need then I can probably help put a skeleton together to get you started. 



    ------------------------------
    Shane Weeden
    IBM
    ------------------------------



  • 5.  RE: Implementing Duo MFA in ISVA

    Posted Tue November 21, 2023 04:42 PM

    Thank you Shane, most of the images are not viewable under https://community.ibm.com/community/user/security/blogs/shane-weeden1/2016/11/29/an-introduction-to-the-infomap-authentication-mech.  Hoping it would add clarity if I was able to view them.

    Will also look at the other articles and research on the curl commands from DUO, I think that's what you meant, right?

    Thanks!



    ------------------------------
    Narayan Verma
    ------------------------------



  • 6.  RE: Implementing Duo MFA in ISVA

    Posted Tue November 21, 2023 05:04 PM

    I have fixed the images on that post. Some time ago my blog was migrated, and during that process the image links were all messed up. I have been fixing them one-by-one as they are brought to my attention, so please let me know if you encounter any other articles with this problem that you would like to see.

    And yes - if you can emulate the APIs that need to be called to perform the Duo flow, I can help translate that into Infomap capabilities.



    ------------------------------
    Shane Weeden
    IBM
    ------------------------------



  • 7.  RE: Implementing Duo MFA in ISVA

    Posted Wed November 22, 2023 12:22 AM

    Narayan - can you please reach out to me directly sweeden_at_au1.ibm.com to further this conversation out of band. I may be able to help here.



    ------------------------------
    Shane Weeden
    IBM
    ------------------------------



  • 8.  RE: Implementing Duo MFA in ISVA

    Posted Thu November 30, 2023 01:39 AM

    For anyone reading this thread later, I documented a solutions approach here:

    https://github.com/sbweeden/blog_assets/tree/master/isva_duo



    ------------------------------
    Shane Weeden
    IBM
    ------------------------------



  • 9.  RE: Implementing Duo MFA in ISVA
    Best Answer

    Posted Thu November 30, 2023 08:40 AM

    Thanks Shane, I read it first thing this morning and have shared it with the team.

     

    Nice blog, as always and a big help for us to get started!