Configuration steps:

Enable Duo Single Sign-On

Log in to the Duo Admin Panel and click Application in the navigation bar on the left.

1. Click Protect an Application and locate the entry for Generic Service Provider with a protection type of "2FA with SSO hosted by Duo (Single Sign-On)" in the applications list. Click Protect to the far-right to start configuring Generic Service Provider.

 

2. Enter below information  into the Service Provider section:

 

• Service Provider Name : Druva SSO

• Entity ID : DCP-login

• Assertion consumer service URL : 

For Public Cloud: https://login.druva.com/api/commonlogin/samlconsume

For Gov Cloud: https://loginfederal.druva.com/api/commonlogin/samlconsume

•  Under SAML Response verify below information.

NameID format : urn:oasis:names:tc:SAML:1:1nameid-format:emailAddress

NameID attribute : Email Address

Signing Option : Check the boxes for Sign Response and Sign Assertion

Create Attributes : Name = druva_auth_token 

         value= SSO Token generated from DCP Admin Console

• Click on Save

4. Under Policy tab : Click on Apply a policy to all users and assign the users to SSO App.

5. Click on Save

6. Once the App is created then download the configuration file from DUO portal by clicking on Download Your Configuration file. 

7. Configuration file contains the login URL for DUO and the certificate.

8. On the DUO access gateway, go to Applications Tab and  upload the configuration file as shown below.

9. Once uploaded you will see the Druva App under applications.