Installing DUO MFA to Hosted State Software Applications
- Chad Carson
This page shows how to use the Service Broker option to set up the DUO Environment Variables for MCOECN Hosted applications. This page is not intended to replace the SSDT documentation that explains the various DUO options and their required values when setting up DUO. That can be found at the page below.
https://mcoecn.atlassian.net/wiki/spaces/rtd/pages/2753029
NOTE: If you plan to use external authentication back to your ITC's Active Directory from MCOECN hosted applications, you will need to allow LDAP access from the MCOECN hosted environment to your local Active Directory server(s) through your ITC firewall.
ALL LDAP requests from the MCOECN Hosted applications will come from a single source IP address :
208.108.246.14
This only needs to be completed one time per ITC…if you are already successfully using external authentication with any hosted application, it will work for all of them. Please share this information with your ITC technical staff if you are setting up external authentication for the first time.
Important Notice: Executing Manage DUO MFA will cause your application to restart. Please ensure that the district is informed about this change, or consider scheduling this task for a future date outside of regular business hours. Schedule the task to run a few minutes into the future if you want to run it right away.
Below are the steps to add DUO integration to State Software Hosted applications through the MCOECN Service Broker.
Log into the Aria Cloud Service Broker at https://cloud.managementcouncil.org/
From the Service Broker, run Manage DUO MFA by clicking on Request.
From the dropdown menus, choose the Application, Deployment Type and a Running Deployment that you want to install DUO into.
Fill out the fields for the DUO values. Note that DUO_CONTEXT, DUO_USXS_HOSTNAME, and DUO_USXS_PORT will be updated for you automatically…we already have this information for MCOECN Hosted State Software applications, so no need to have you type it out.
If a DUO config already exists, the information will be loaded into the form so you can edit it.DUO and MiniOrange (an alternative MFA application) cannot exist simultaneously on a State Software application. Installing DUO will wipe out existing MiniOrange configurations, and vice versa. Check the box that acknowledges that any existing MiniOrange configuration will be deleted if it exists. Set a date/time to run this, and Submit.
You also have the option to completely delete DUO from the selected application by checking this box instead.
When you do, the entry form will be removed, choose a date/time to run the Remove, and Submit.
