Table of Contents

• Users
• Windows DUO MFA Setup
• Authentication Logs

Users

Here, I have already added and enrolled a user called 'user-a'. "Enrolled" means that this user is already tied to a person's phone number and Duo Mobile application on his or her phone.

Further down, I can let the user skip two-factor authentication, or automatically deny access. By default, the status is set to active and the authentication method is selected automatically. I can also create and assign Users to Groups to easily manage multiple users at once.

Here are all the users I have added, each one uses a different email address. In this case, they are all enrolled and using the same phone number.

Windows Duo MFA Setup

Launch the Duo Win Login installer and complete the setup.

Setup requires these three details to be entered: the API hostname, integration key, and secret key.

Duo Authenticator for Windows Logon Installer

Paste in the API hostname.

Paste in the integration key and secret key.

For me, no further manual configuration was needed, so I have completed the initial setup.

Testing Duo MFA with my enrolled mobile device.

Authentication Logs

Here I can see the last authentication from earlier. I can click on it to see more details, shown below:

Authentication log from earlier, access has been granted to user-a from the device DESKTOP-NN9AULK, authenticated via Duo Push.