Configuring Multi-Factor authentication (MFA)

Configuring Duo MFA

Prerequisites

• You will need administrator access to the 7fivefive Lens Portal

• You will need administrator access to your Duo account

Creating the Duo application

Before configuring the Lens Portal, we need to create a Duo application. This will provide us with the API credentials we need to connect via the Lens Portal.

1. Log in to the Duo administrator dashboard

2. In the left-side menu select Applications
   

   

3. Click the Protect an Application button

4. In the search box, enter Web SDK. On the Web SDK item, click the Protect button

   

5. Make a note of the following details

   1. Client ID

   2. Client secret

   3. API hostname

6. Scroll down to the Settings section. In the Name field enter something like Lens Portal. This can be anything, however, it is recommended to have something that is descriptive so the application is not modified by accident in future.

7. Depending on your authentication provider (AD, SAML etc) you may want to enable the Simple option in the Username normalization field.

8. 

   Click the Save button

Configuring the Lens Portal

1. Login to the Lens Portal. The user must have the 'Access to Settings' permission for the location where the scheduler will be enabled.

2. In the left sidebar, open the Configuration menu, then select the Settings option

3. Under the General group, select the Authentication option

4. Click the Multi-Factor Authentication tab

5. Check the Enabled toggle

6. Ensure that the Lens Portal FQDN is correct in the 7fivefive Lens public FQDN field

7. In the Client ID field, enter the client ID saved from the previous section

8. In the Client Secret field, enter the client secret saved from the previous section

9. In the API Hostname field, enter the API hostname saved from the previous section

10. In the Fail mode selection box, choose how you want the portal to behave if it is unable to contact Duo.

11. Click the Save button

12. Confirm the connection by scrolling to the Client ID field and clicking the Test connection button.