Author Topic: Any way to integrate 2FA service (Duo Security)?  (Read 56 times)

0 Members and 1 Guest are viewing this topic.

Offline beeswax

  • Occasional poster
  • *
  • Posts: 1
    • View Profile
Any way to integrate 2FA service (Duo Security)?
« on: April 15, 2019, 01:21:56 PM »
Hello everyone,  I'm a long-time user and lurker but never posted here before, greetings  :)

I'm running HFS on a Windows server and at the moment, I shut it down when not in use because of all the attempts from hackers to either exploit or brute-force the server.  I recently discovered Duo Security for protecting my server from unwanted RDP logon attempts and by adding this, I can block access completely from all foreign countries, restrict logons to only use a specfic username and once correct credentials are entered, a 2FA prompt on my phone must be approved.  It's made me a lot more confident leaving RDP enabled all the time on my server.

Now, what I'm getting to, I noticed Duo also have a Web API which would be amazing if it were integrated into HFS, is this possible at all?

This is Duo Security: www [dot] duo [dot] com (sorry, I'm not allowed to post links!)

and here is the documentation for integrating it into webapps: [https] ://duo.com [slash] docs [slash] duoweb

Not being a coder, almost all of that is over my head but I'm hoping some clever person here understands it.  Thanks!

Offline bmartino1

  • Tireless poster
  • ****
  • Posts: 833
  • I'm only trying to help i mean no offense.
    • View Profile
    • My HFS Google Drive Shared Link
Re: Any way to integrate 2FA service (Duo Security)?
« Reply #1 on: April 16, 2019, 12:31:21 AM »
?
https://duo.com/
https://duo.com/docs/duoweb

is it posible to html code in hfs yes, i'm not familura with duo nor its web api.

from what i see:

First Steps
Before starting:

Sign up for a Duo account.
Log in to the Duo Admin Panel and navigate to Applications.
Click Protect an Application and locate Web SDK in the applications list. Click Protect this Application to get your integration key, secret key, and API hostname. (See Getting Started for help.)
Download and install a supported client library (Python, Ruby, Classic ASP, ASP.NET, Java, PHP, Node.js, ColdFusion, Perl).
Use NTP to ensure that your server's time is correct.

you need to download and setup a client libary. (id recomend java)
and use the iframe souce form the document

--------------
The problem, HFS at the moment doen't support php, not is ther a predeveloped webcode form there site for hfs to intergrate. you wil lahve to manualy code or contact them for html coding support to intergrate it into hfs.

Contact Support
support@duo.com
Call Sales
1.866.760.4247
Email Sales
Contact Sales
« Last Edit: April 16, 2019, 12:35:10 AM by bmartino1 »
I'm only trying to help i mean no offense.
thank you for your time and patience,
Bmartino1