On Sun, Oct 1, 2023 at 2:50 AM <[email protected]> wrote: > Hi, > > I have setup up guacamole 1.5.3 with Duo MFA authentication using the > guacamole-auth-duo extension. > However it does not seems to support universal prompt but only the > standard prompt from Duo. > > As Duo is removing the possibility to use the standard prompt I need to > know if there is a specific setting in this extension to use universal > prompt or that there is another auth-duo file to use. > > Yeah, the Universal Prompt is only supported by the v4 SDK, which is not currently supported by the Duo extension. Unfortunately the process to update is a bit involved - probably nothing terribly difficult, but not as simple as switching out the JavaScript files.
In looking at the documentation for the v4 SDK, it looks like they have removed the capability of processing the login via an iFrame, and, instead, require a sequence of redirects to get to the Duo login and then back to Guacamole. I'm guessing this means that the Duo v4 login (including Universal Prompt) will look very similar to the SSO login modules in how it behaves. -Nick
