mirror of
https://github.com/oauth2-proxy/oauth2-proxy.git
synced 2026-10-08 07:31:29 +02:00
Shriya Kamat TarcarandJan Larwig
a8e208430e
* docs: add Cisco Duo SSO provider documentation Signed-off-by: Jan Larwig <jan@larwig.com> * doc: backport to versioned docs 7.13 and fix alphabetical order of entries Signed-off-by: Jan Larwig <jan@larwig.com> * doc: improved clarity for the cisco duo configuration steps Signed-off-by: Jan Larwig <jan@larwig.com> --------- Signed-off-by: Jan Larwig <jan@larwig.com> Co-authored-by: Jan Larwig <jan@larwig.com>
1.3 KiB
1.3 KiB
id, title
| id | title |
|---|---|
| cisco_duo | Cisco Duo |
Cisco Duo SSO can be configured with OAuth2 Proxy using the OIDC provider.
- Create a new Generic OIDC Relying Party - Single Sign-On application in the Duo Admin Portal
- Configure OAuth2 Proxy with the following options:
provider = "oidc"
provider_display_name = "Duo SSO"
scope = "openid email profile"
pass_access_token = true
code_challenge_method = "S256"
- Configure Provider endpoints. Copy the following values from the corresponding fields in the Duo Admin Portal:
# Copy from "Client ID" field
client_id = "XXXXXXXX"
# Copy from "Client Secret" field
client_secret = "XXXXXXXX"
# Copy from "Issuer" field
oidc_issuer_url = "https://sso-xxxxxxxx.sso.duosecurity.com/oidc/xxxxxxxx"
# Copy from "JWKS URL" field
oidc_jwks_url = "https://sso-xxxxxxxx.sso.duosecurity.com/oidc/xxxxxxxx/jwks"
# Copy from "Token Introspection URL" field
validate_url = "https://sso-xxxxxxxx.sso.duosecurity.com/oidc/xxxxxxxx/token_introspection"
# Copy from "UserInfo" field
profile_url = "https://sso-xxxxxxxx.sso.duosecurity.com/oidc/xxxxxxxx/userinfo"
# Copy from "Token URL" field
redeem_url = "https://sso-xxxxxxxx.sso.duosecurity.com/oidc/xxxxxxxx/token"
- Complete Configuration by filling in any remaining required fields and save your configuration.