Update security.md
Added Duo installation steps.
Ylian Saint-Hilaire committed
Jan 1, 2025 at 17:18 UTC
7aa4061cadfaf60d8d1cf4e3c9a5ad33c90058b9
1 file changed
+26
docs/docs/meshcentral/security.md
+26
@@ -27,3 +27,29 @@ Adjust these items in your `config.json`
27
}
28
}
29
```
30
+
31
+## Duo 2FA setup
32
+
33
+MeshCentral supports Duo as a way for users to add two-factor authentication and Duo offers free accounts for user 10 users. To get started, go to [Duo.com](https://duo.com/) and create a free account. Once logged into Duo, select "Applications" and "Protect an Application" on the left side. Search for "Web SDK" and hit the "Protect" button. You will see a screen with the following information:
34
+
35
+ - Client ID
36
+ - Client secret
37
+ - API hostname
38
+
39
+Copy these three values in a safe place and do not share these values with anyone. Then, in your MeshCentral config.json file, add the following in the domains section:
40
+
41
+```
42
+{
43
+ "domains": {
44
+ "": {
45
+ "duo2factor": {
46
+ "integrationkey": "ClientId",
47
+ "secretkey": "ClientSecret",
48
+ "apihostname": "api-xxxxxxxxxxx.duosecurity.com"
49
+ }
50
+ }
51
+ }
52
+}
53
+```
54
+
55
+Restart MeshCentral and your server should now be Duo capable. Users will see an option to enable it in the "My Account" tab. When enabling it, users will be walked thru the process of downloading the mobile application and going thru a trial run on 2FA. Users that get setup will be added to your Duo account under the "Users" / "Users" screen in Duo. Note that the "admin" user is not valid in Duo, so, if you have a user with the name "Admin" in MeshCentral, they will get an error trying to setup Duo.