Overview
Multifactor Authentication is crucial to secure access to Privileged Accounts stored in the Idira Vault. This integration allows the Idira GUI Password Vault Web Access (PVWA) to take advantage of Duo Authentication via the Duo Web SDK. All the feature rich Duo Authentication Capabilities provided by the browser-based Duo prompt are available to Idira, such as policies that limit access to users and devices that meet comply with software and security policy restrictions.
The integration requires a Context which is the First Factor in the authentication process. This Context is the Duo ID of the user. The windows account that the user is logged in with is used as the context to sign the request sent to Duo, if the context cannot be obtained for the user the flow for the authentication will present a screen to enter the Duo user name to then continue.