Community
Showing results for 
Search instead for 
Do you mean 
Reply

Duo Security - Two Factor Authorization for login - ACT For Web

Copper Contributor
Posts: 16
Country: USA

Duo Security - Two Factor Authorization for login - ACT For Web

Guys,

 

I am trying to setup a Duo Security Two Factor Authorization for the ACT For Web login.

 

http://www.duosecurity.com

 

It's Free Two Factor (SMS, Phone Call, Push). Facebook & NASA are clients. Think Google Authenticator but better.

 

I figured if its good for the people sending rockets into space, its good for my small server.

 

Duo Security has a Web SDK and Video.

https://www.duosecurity.com/docs/duoweb

 

& a ASP.NET integration on Github.

https://github.com/duosecurity/duo_dotnet

 

Is it safe to say that this java could be uploaded to folder:

 

C:\Program Files (x86)\ACT\Act for Web\APFW\Views\Account

 

and some Iframe and code be added to:

 

C:\Program Files (x86)\ACT\Act for Web\APFW\Views\Account\Index.cshtml

 

Or is the login a little more complicated than this.

 

Just asking before I spent hours trying to make it work and finally give up and hire some ASP guy.

 

Any insights will help?

 

Rafael

Copper Contributor
Posts: 16
Country: USA

Re: Duo Security - Two Factor Authorization for login - ACT For Web

Got busy.

 

Realised that the Login form data more than likely validates with SQL.

 

I was looking for a file that did the validation.

 

Will try to add java and an iframe to index.cshtml:

 

C:\Program Files (x86)\ACT\Act for Web\APFW\Views\Account\Index.cshtml

 

That should bringup DuoSecurity Iframe but I think it won't overlap the ACT login. Which is what would work.

 

Then I have no idea how to program in ASP.

 

Might take a bit.

 

 

 

 

Copper Contributor
Posts: 16
Country: USA

Re: Duo Security - Two Factor Authorization for login - ACT For Web

I got busy with other projects. I am an Apache guy so my weakpoint is Windows Hosting and IIS.

 

I'm investigating Duo Security Proxy Authentications:

 

https://www.duosecurity.com/docs/authproxy_reference

 

We could use DLAP or Radius Server

 

My email to ACT Tech has been ignored.

 

So does anyone know if we could Authenticate ACT For Web with DLAP or a Radius Server.

 

So   192.0.0.0.0 (IP)/apfw  --->DLAP or Radius Server Authentication ----> ACT Login