solokeys / solo1-cli

Solo 1 library and CLI in Python
https://pypi.org/project/solo-python
Apache License 2.0
182 stars 69 forks source link

generating duo 2fa passcodes #150

Open jpjoines opened 2 years ago

jpjoines commented 2 years ago

How do you use solo1 to generate Duo 2FA "passcodes"?

My normal workflow is to authenticate to one of my employer's systems via username and password, most frequently to an OpenSSH 8.0 server from my KDE Neon (Ubuntu 20.04) desktop. Then I am prompted to either enter a 7-digit "passcode", or enter a menu choice to have a passcode sent to me via SMS.

Recently, I had problems receiving the passcodes via SMS, so my employer's Duo admins suggested I get a hardware token. I purchased a Solo 1 USB-A, and have updated the firmware to version 4.1.5. I've registered the device via my employer's Duo device registration website, and authentication via web browser works fine. However, I have explored the solo1-cli options and haven't figured out how to generate the passcodes for non web browser authentication. I've seen that there is some SoloKeys developer documentation, but haven't found any user-level documentation.

How do I generate the passcodes?