Duo on Vcenter login possible?

[kelker2023]

is this possible to get working?

[pashnal]

Hi , 

 

yes its possible , Please gothrough this videos : https://www.youtube.com/watch?v=q-7ee2tJAQo 

 

Thanks , 

pashnal

[Michel Keus]

Yes there are a few ways to do it. Either directly through the DUO Proxy or via ADFS.

Here are some references:

• virtualizationhowto.com: Easy vCenter Server two-factor authentication without ADFS (December 2021) 
• VMware Technical Adoption Management: TAM Lab – Enabling MFA in vSphere 7 (June 2022) 

[tdoc210]

Yes,

You need to set up an LDAPS proxy in DUO and point your ldap there in vcenter. I have this working perfectly fine using LDAPS loadbalanced to multiple duo proxies. Setup is the same for a normal ldaps server, just point it tour proxy fqdn or vip fqdn

[AmandaJansen]

Thanks, my issue has been fixed.

[SactownSteve]

Quick question.  I am working on setting up Duo, but once completed if for some reason the Duo proxies become unavailable can you still sign into vCenter with the vphere.local account?