authelia/docs/content/en/configuration/second-factor/duo.md

title	description	lead	date	draft	images	menu	weight	toc	aliases
Duo / Mobile Push	Configuring the Duo Mobile Push Notification Second Factor Method.		2022-06-15T17:51:47+10:00	false		configuration parent second-factor	103200	true	/docs/configuration/duo-push-notifications.html

Authelia supports mobile push notifications relying on Duo.

Follow the instructions in the dedicated documentation for instructions on how to set up push notifications in Authelia.

Note: The configuration options in the following sections are noted as required. They are however only required when you have this section defined. i.e. if you don't wish to use the Duo push notifications you can just not define this section of the configuration.

Configuration

{{< config-alert-example >}}

duo_api:
  disable: false
  hostname: 'api-123456789.example.com'
  integration_key: 'ABCDEF'
  secret_key: '1234567890abcdefghifjkl'
  enable_self_enrollment: false

Options

This section describes the individual configuration options.

Disable

{{< confkey type="boolean" default="false" required="no" >}}

Disables Duo. If the hostname, integration_key, and secret_key are all empty strings or undefined this is automatically true.

hostname

{{< confkey type="string" required="yes" >}}

The Duo API hostname. This is provided in the Duo dashboard.

integration_key

{{< confkey type="string" required="yes" >}}

The non-secret Duo integration key. Similar to a client identifier. This is provided in the Duo dashboard.

secret_key

{{< confkey type="string" required="yes" >}}

Important Note: This can also be defined using a secret which is strongly recommended especially for containerized deployments.

The secret Duo key used to verify your application is valid. This is provided in the Duo dashboard.

enable_self_enrollment

{{< confkey type="boolean" default="false" required="no" >}}

Enables Duo device self-enrollment from within the Authelia portal.