---
title: "How to register a Duo Security MFA provider"
slug: "how-to-register-the-duo-sec-multi-factor-authentication-provider"
updated: 2026-11-03T14:48:02Z
published: 2026-11-03T14:48:02Z
canonical: "docs.senhasegura.io/how-to-register-the-duo-sec-multi-factor-authentication-provider"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to register a Duo Security MFA provider

This document provides information on how to integrate the **Segura™ Platform** with the Duo Security authentication provider. You can use Duo multi-factor authentication to log in and start sessions on the **Segura™ Platform**.

## Requirements

- Have an account with an administrator profile in [Duo Security](https://duo.com/).
- Have the [Duo Mobile application](https://duo.com/product/multi-factor-authentication-mfa/duo-mobile-app#download) installed on the device.
- [DNS configured on the **Segura™ Platform**](/v4-2/docs/orbit-cli-how-to-configure-dns).

Attention

- Direct communication between the **Segura™ Platform** and Duo Security is required. Proxies are not supported.
- The application must have DNS configured and a valid certificate to establish connectivity with the Duo endpoint. In the **Orbit** configuration, the **Application URL** field must also be configured with the instance DNS.

## Step 1: Create an application in Duo Security

1. Log in to the [Duo Admin Panel](https://admin.duosecurity.com/login?next=%2F).
2. In the left-side menu, select **Applications**.
3. Click **Application Catalog**.
4. In the search bar, type **Web SDK**.
5. Click **+ Add**.
6. In the **Application name** field, enter the desired application name.
7. Copy the `Client ID`, `Client Secret`, and `API hostname`. You will need this information to complete the configuration.
8. Click **Save**.

## Step 2: Enable the use of an external MFA solution

1. On the **Segura™ Platform**, hover over the **Products menu** and select **Settings**.
2. In the side menu, select **Security policies and network > Authentication security**.
3. In the **Multi-factor authentication** section, check **Enable external Multi-Factor Authentication application**.
4. Click **Save**.

Attention

When enabling this feature, some security mechanisms will be disabled. This changes the **SameSite** property from `Strict` to `Lax`. Make sure you have a firewall configured to deny access from unauthorized websites to your **Segura™ Platform** server.

## Step 3: Register Duo Security as an MFA provider on the Segura™ Platform

1. On the **Segura™ Platform**, hover over the **Products menu** and select **Settings**.
2. In the side menu, select **MFA > Providers**.
3. In the **Providers** report, click **Add**.
4. On the **Select the provider** screen, select **Duo Security**.
5. On the **Provider registration** screen, complete the fields:
  1. **Name ***: identifier name for the Duo Security provider.
  2. **Enabled**: choose whether the provider will be created as active or inactive.
  3. **Endpoint ***: enter the `API hostname` value generated in Duo Security.
  4. **Client ID ***: enter the `Client ID` value generated in Duo Security.
  5. **Client secret**: enter the `Client Secret` value generated in Duo Security.
6. Click **Save**.

## Step 4: Configure Duo as the user MFA

1. On the **Segura™ Platform**, open the user menu in the upper-right corner and select **Configure MFA**.
2. Select the **Duo Security** provider configured in step 3 and click **Continue**.
3. Log in to your Duo application.
4. Select the **Duo Mobile** authentication method.
5. Select your country from the dropdown menu.
6. Enter your mobile phone number.
7. Click **Continue**.
8. Click **Yes, it's correct** to confirm your phone number.
9. Click **Next**.
10. Open the **Duo Mobile** application on your phone.
11. Add the account by scanning the QR code displayed on the screen.
12. When you receive confirmation that **Duo Mobile** was added, click **Continue**.
13. To finish, click **Log in with Duo**.

Now, when accessing the **Segura™ Platform**, you will receive a push notification in your Duo Mobile application to complete authentication.

## Related links

- [How to access Terminal Proxy with Duo Push authentication](/v4-2/docs/pam-sessionmanagement-how-to-access-terminal-proxy-with-duo-push-authentication)
- [How to access RDP Proxy with Duo Push authentication](/v4-2/docs/pam-sessionmanagement-how-to-access-rdp-proxy-with-duo-push-authentication)