search

Ylianst / MeshCentral

A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on the local network or over the Internet.
https://meshcentral.com
Apache License 2.0
4.33k stars 576 forks source link

Feature Request: Duo MFA #2432

Open CornHead764 opened 3 years ago

CornHead764 commented 3 years ago

Been using Mesh Central for a few years now, and have been using the built in 2fa for a long time. It works great, but I recently discovered there is a free tier for Duo to use their app based mfa, so you can use a push notification as the mfa method for free. I would love to see mesh central integrate duo as a 2fa method. Any of the paid tiers could use duo as a saml provider to integrate with mesh central that way, however those of us on the free tier don't seem to have an option for integration with mesh central :(

Below is a link to their web sdk and OIDC api documentation

https://duo.com/docs/duoweb https://duo.com/docs/oauthapi

Ylianst commented 3 years ago

Interesting. I always figured Google or Microsoft would offer a free push notification 2FA to help the Internet since FireBase Cloud Notifications are free. I will take a look at this, if they have a NodeJS SDK, that would be perfect. The MeshCentral 2FA login screen is not currently "live" (websocket), so I would have to do some work to change that. This said, it would be cool to tap ok on a mobile device for 2FA.

CornHead764 commented 3 years ago

A quick google search yielded the below GitHub repository, which appears to be supported by duo directly. Hopefully this is relatively easy to implement.

https://github.com/duosecurity/duo_nodejs

Ylianst commented 3 years ago

Your fast. Yes, this is exactly what I need and being supported by Duo is excellent. It's also on NPM here, so exactly perfect. I will give this a try.

VINISHVV commented 3 years ago

Wow, good feature .. I am awaiting for the same in MC.

eldadh commented 3 years ago

Cant wait for this feature, Would be a great addition to a greate piece of sofware.

CornHead764 commented 3 years ago

Any update on this? Just curious

VINISHVV commented 3 years ago

@CornHead764 - Duo MFA is not implemented, But same functionality enabled in Meshcentral Mobile app.

Please refer #2495

CornHead764 commented 3 years ago

@CornHead764 - Duo MFA is not implemented, But same functionality enabled in Meshcentral Mobile app.

Please refer #2495

Looks like no dice for us iOS users :(

Oh well, I'll keep waiting :)

m4zl commented 2 years ago

I am also waiting full of interest for the Duo MFA. We would like to use it aswell.

Any updates on this @Ylianst maybe?

fredclown commented 2 years ago

Also would love top see Duo support.

Ylianst commented 1 year ago

I looked at Duo MFA support a long time ago and it's a paid service. If I remember correctly, I could get a free account and support a few users, but beyond this, you needed to pay a monthly fee so I focused on free 2FA solutions instead. I don't have much time these days since I am focused on starting up in a different job, but if someone has a pull request for Duo, I will certainly accept it.