Duo supports authentication using one-time password (OTP) hardware tokens such as Deepnet SafeID. There are 2 types of OTP tokens, event-based (HOTP) and time-based (TOTP), and Duo can support both event-based and timed based tokens. However, Duo does not support TOTP token drift or TOTP resync. As a result, TOTP tokens may eventually fall out of sync and generate invalid passcodes. Therefore, in the long run, event-based token works better with Duo.
Deepnet SafeID provides both event-based and time-based tokens. Below is the list of SafeID tokens:
Import Hardware Tokens
Download Token Seed File
First, obtain the seed file of your SafeID tokens Frist obtain you seed data using the instructions in the following guide (in step 4 select "Duo CSV");
How to request token seed or secret file
In step 4 select "Duo CSV";
Import Hardware Tokens to Duo
To import hardware tokens into Duo, follow the steps below.
...
6 - Copy the entire content and paste it in to into the CSV token data box in the Duo portal
...
7 - Click Import Hardware Tokens button
...
Assign Hardware Tokens to Users
Once tokens have been uploaded the they will need to be assigned to users using the following instructions;
| Expand | ||||||
|---|---|---|---|---|---|---|
| ||||||
|
Synchronising HOTP Hardware Tokens
If you are using SafeID/Eco event based tokens (HOTP), then if you find that the OTP codes generated by the token are rejected by Duo during authentication, you may find that you need to synchronise the tokens using the following procedure;
...
| title | How to Synchronise HOTP hardware tokens with Duo |
|---|
...
Please note that only event based HOTP tokens (SafeID/Eco) can be synchronised with Duo as Duo currently doesn't support synchronising TOTP tokens.
Deleting Hardware Tokens
Tokens that have been previously imported into Duo can be removed using the following procedure;
| Expand | ||||
|---|---|---|---|---|
| ||||
|
Related Articles
- SafeID Hardware Tokens
- How to request token seed or secret file
- Assign a hardware token to an end user in Duo
- Resynchronize Tokens in Duo
- Delete Tokens in Duo
...