Contents
Duo Access Gateway adds two-factor authentication, complete with inline self-service enrollment and Duo Prompt to popular cloud services like Salesforce and Google G Suite using SAML 2.0 federation.
Duo Access Gateway reached Last Day of Support on October 26, 2023 for Duo Essentials, Advantage, and Premier customers. As of that date, Duo Support may only assist with the migration of existing Duo Access Gateway applications to Duo Single Sign-On. Please see the Guide to Duo Access Gateway end of life for more details.
Learn more about Duo Single Sign-On, our cloud-hosted identity provider featuring Duo Central and the Duo Universal Prompt.
Overview
Duo Access Gateway secures access to cloud applications with your users’ existing directory credentials (like Microsoft Active Directory or Google Workspace accounts) using the Security Assertion Markup Language (SAML) 2.0 authentication standard. SAML delegates authentication from a service provider to an identity provider, and is used for single sign-on (SSO) solutions.
Protected cloud applications redirect your users to the Duo Access Gateway server on your network. Duo Access Gateway acts as a SAML identity provider (IdP), authenticating your users using your existing primary authentication source for credential verification, and then prompting for two-factor authentication before permitting access to the SAML application.
Follow along as this video series takes you through installing Duo Access Gateway on Windows, configuring authentication and other options, and connecting to a cloud service provider.
Please see the Duo Access Gateway documentation for complete deployment instructions. We've also created instructions for configuring SSO in popular supported cloud apps.
Part One: Installation
Watch an install of Duo Access Gateway and its prerequisites.
Reference: Duo Access Gateway Windows Prerequisites and Duo Access Gateway Windows Install
Part Two: Configuration
Learn how to add Microsoft Active Directory as the primary authentication source to your Duo Access Gateway and protect Salesforce.com logins with SSO.
Reference: Duo Access Gateway Authentication Source: Active Directory and Salesforce: Duo Access Gateway.
Part Three: Enabling the Duo Access Gateway Launcher and Configuring a Remembered Devices Policy
See how to enable the application launcher for your users and minimize repeated Duo prompts for your Duo Access Gateway applications.
Reference: Enable the Duo Access Gateway Launcher and Duo Access Gateway with Remembered Devices.
Troubleshooting
Need some help? Take a look at the Duo Access Gateway Frequently Asked Questions (FAQ) page or try searching our Duo Access Gateway Knowledge Base articles or Community discussions. For further assistance, contact Support.