Using Cisco DUO for Multifactor Authentication for CTE GuardPoints

Integration with Cisco DUO requires creating an OIDC connection in CipherTrust Manager, after creating a DUO account.

On the DUO platform:

1. Create an account on Cisco Duo.

2. Login to your Cisco DUO account as an admin and click Users in the left navbar to create/add one or more users.

3. While creating a user, set the Status as Active

4. Click Applications in the left navbar.

5. Click Protect an Application.

6. In the search field, type Web SDK.

7. In the Web SDK field, click Protect.

8. In the application created, note the values for:

   • Client ID

   • Client Secret

   • API hostname

   Note

   https:// is the value for the URL of the OIDC Provider.

Create an OIDC Connection with CipherTrust Manager

1. Log on to the CipherTrust Manager GUI as an administrator.

2. In the left pane, click Access Management > Connections.

3. In the Connections, click Add Connection.

4. Click OIDC and then click Next.

5. Provide a name for the connection and click Next.

6. Enter values for the configuration information.

   Note

   Refer to your Multifactor Authentication provider profile for the values:

   • URL of OIDC provider:
   Linux

   • For KeyCloak, select the URL of the OIDC provider

   Windows

   • For Thales SafeNet Trusted Access, select Well Known Configuration URL

   • For all other providers, select the URL of the OIDC provider

   • Client-ID as configured for the OIDC client

   • Client-Secret as shown for the OIDC client

7. Click Next and in the Add Products window, select CTE for product.

8. Click Add Connection.