Configuring Multi-Factor authentication (MFA)
Configuring Duo MFA
Prerequisites
You will need administrator access to the 7fivefive Lens Portal
You will need administrator access to your Duo account
Creating the Duo application
Before configuring the Lens Portal, we need to create a Duo application. This will provide us with the API credentials we need to connect via the Lens Portal.
Log in to the Duo administrator dashboard
In the left-side menu select
Applications
Click the
Protect an Application
buttonIn the search box, enter
Web SDK
. On theWeb SDK
item, click theProtect
buttonMake a note of the following details
Client ID
Client secret
API hostname
Scroll down to the
Settings
section. In theName
field enter something likeLens Portal
. This can be anything, however, it is recommended to have something that is descriptive so the application is not modified by accident in future.Depending on your authentication provider (AD, SAML etc) you may want to enable the
Simple
option in theUsername normalization
field.Click the
Save
button
Configuring the Lens Portal
Login to the Lens Portal. The user must have the 'Access to Settings' permission for the location where the scheduler will be enabled.
In the left sidebar, open the
Configuration
menu, then select theSettings
optionUnder the
General
group, select theAuthentication
optionClick the
Multi-Factor Authentication
tabCheck the
Enabled
toggleEnsure that the Lens Portal FQDN is correct in the
7fivefive Lens public FQDN
fieldIn the
Client ID
field, enter the client ID saved from the previous sectionIn the
Client Secret
field, enter the client secret saved from the previous sectionIn the
API Hostname
field, enter the API hostname saved from the previous sectionIn the
Fail mode
selection box, choose how you want the portal to behave if it is unable to contact Duo.Click the
Save
buttonConfirm the connection by scrolling to the Client ID field and clicking the
Test connection
button.
![](../../../__attachments/2820341761/image-20230209-100648.png?inst-v=e065097c-ce54-4077-bfce-12cc2b09b30d)