

Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname. Log in to the Duo Admin Panel and navigate to Applications.Ĭlick Protect an Application and locate the entry for OpenVPN in the applications list.To get started with Duo for OpenVPN, you'll need to: Administrators should enroll users ahead of time, either manually through the Duo Admin Panel or with Duo's bulk enrollment (which sends personalized enrollment links via email). Inline self-enrollment is not supported since OpenVPN doesn't offer a web interface for login.

"push", "phone", "sms") as their OpenVPN password. Users will provide a passcode or factor identifier (eg.Support for OpenVPN deployments with password authentication may be supported in the future. Duo only integrates with OpenVPN servers that employ certificate authentication and use a unique common name (CN) in each user's cert.
#Duo mobile push notification how to#
First Stepsīefore moving on to the deployment steps, it's a good idea to familiarize yourself with Duo administration concepts and features like options for applications, available methods for enrolling Duo users, and Duo policy settings and how to apply them. See Duo Knowledge Base article 7546 for additional guidance.

If your organization requires IP-based rules, please review Duo Knowledge Base article 1337.Įffective June 30, 2023, Duo no longer supports TLS 1.0 or 1.1 connections or insecure TLS/SSL cipher suites. This application communicates with Duo's service on SSL TCP port 443.įirewall configurations that restrict outbound access to Duo's service with rules using destination IP addresses or IP address ranges aren't recommended, since these may change over time to maintain our service's high availability.
