On the "Add Multi-Factor Authentication Provider" page, select Duo from the "Provider Type" options and click OK.Ĭlick the Edit button next to the Duo provider. Once on the "Edit Tenant Setup - Security" page, scroll down to the "Multi-Factor Authentication Providers" table and click the Add Multi-Factor Authentication. Log on to your Workday tenant as an administrator and access the Edit Tenant Setup - Security task. Don't share it with unauthorized individuals or email it to anyone under any circumstances! Configure Duo MFA in Workday Secure it as you would any sensitive credential. The security of your Duo application is tied to the security of your secret key (skey). While on the new Admin API application's details page, scroll down to the "Permissions" section and enable Grant read information, Grant read resource, and Grant write resource.You may find it helpful to give this Admin API application a unique name, like "Workday Admin API".You will need to enter this information into your Workday tenant as well. Click Protect this Application to get your integration key, secret key, and API hostname. Click Protect an Application again and locate Admin API in the applications list.See Protecting Applications for more information about protecting applications in Duo and additional application options. You'll need this information to complete your setup. Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname. Log in to the Duo Admin Panel and navigate to Applications.Ĭlick Protect an Application and locate the entry for Workday with a protection type of "2FA" in the applications list.Sign up for a Duo account if you don't already have one, and contact Duo Support to have Admin API enabled for your account. ![]() You should be a Workday administrator with the rights to modify your tenant's security settings and to manage and activate authentication policies. Only admins with the Owner role may create new Admin API applications in the Duo Admin Panel. You should have the Duo Owner administrator role. Please see our Duo Single Sign-On for Workday documentation for more information. Duo provides multiple options for protecting SSO IdP logins. Workday recommends applying two-factor authentication at the SSO IdP. Workday's Duo integration supports first-time MFA enrollment and two-factor authentication when logging into Workday from a browser or the Workday mobile app.Īt this time you cannot apply the Duo MFA authentication condition to any Workday SSO users federated with an external identity provider. Workday and Duo have partnered to offer Duo's MFA authentication as part of Workday's conditional authentication policies.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |