Duo supports authentication using one-time password (OTP) hardware tokens such as Deepnet SafeID. There are 2 types of OTP tokens, event-based (HOTP) and time-based (TOTP), adn and Duo can support both event-based and timed based tokens. However, Duo Duo does not support TOTP token drift or TOTP resync. As a result, TOTP tokens may eventually fall out of sync and generate invalid passcodes. Therefore, in the long run, event-based token works better with Duo.
Deepnet SafeID provides both event-based and time-based tokens. Below is the list of SafeID tokens:
http://www.deepnetsecurity.com/authenticators/one-time-password/safeid/
...
Download Token Seed File
First, obtain the seed file of your SafeID tokens using the instructions in the following guide
How to request token seed or secret file
In step 4 select "Duo CSV";
Import Hardware Tokens to Duo
To import hardware tokens into Duo, follow the steps below.
1 - Log in to the Duo Admin Panel
2 - Click 2FA Devices in the left sidebar, then click Hardware Tokens. A list of hardware tokens is shown, along with the attached end user, if any.
3 - Click the Import Hardware Tokens button
4 - Select the correct Token type, (i.e. for Safeid/Eco tokens select "HOTP 6-digit", and for all other Safeid tokens select "TOTP-6 digit").
5 - Open the SafeID token seed file received from Deepnet Security in a text editor such as Notepad
6 - Copy the entire content and paste it into the CSV token data box in the Duo portal
7 - Click Import Hardware Tokens button
Assign Hardware Tokens to Users
Once tokens have been uploaded they will need to be assigned to users using the following instructions;
| Expand | ||||||
|---|---|---|---|---|---|---|
| ||||||
|
Related Articles
- SafeID Hardware Tokens
- How to request token seed or secret file
- Assign a hardware token to an end user in Duo
- Resynchronize Tokens in Duo
- Delete Tokens in Duo