Duo supports authentication using one-time password (OTP) hardware tokens such as Deepnet SafeID. There are 2 types of OTP tokens, event-based (HOTP) and time-based (TOTP), and Duo can support both event-based and timed based tokens. However, Duo does not support TOTP token drift or TOTP resync. As a result, TOTP tokens may eventually fall out of sync and generate invalid passcodes. Therefore, in the long run, event-based token works better with Duo.

Deepnet SafeID provides both event-based and time-based tokens. Below is the list of SafeID tokens:

SafeID Hardware Tokens

Download Token Seed File

First, obtain the seed file of your SafeID tokens using the instructions in the following guide

How to request token seed or secret file

In step 4 select "Duo CSV";

Import Hardware Tokens to Duo

To import hardware tokens into Duo, follow the steps below.

1 - Log in to the Duo Admin Panel

2 - Click 2FA Devices in the left sidebar, then click Hardware Tokens. A list of hardware tokens is shown, along with the attached end user, if any.

3 - Click the Import Hardware Tokens button

4 - Select the correct Token type, (i.e. for Safeid/Eco tokens select "HOTP 6-digit", and for all other Safeid tokens select "TOTP-6 digit").

5 - Open the SafeID token seed file received from Deepnet Security in a text editor such as Notepad

6 - Copy the entire content and paste it into the CSV token data box in the Duo portal

7 - Click Import Hardware Tokens button 

Assign Hardware Tokens to Users

Once tokens have been uploaded they will need to be assigned to users using the following instructions;

1 - Log in to the Duo Admin Panel and click 2FA Devices in the left sidebar, then click Hardware Tokens.


2 - Click on the serial number of a token to access the token's properties page, e.g 10001002 


3 - On the token's properties page, scroll down to the Users table and click the Attach User button.

4 - Select a Duo user from the drop-down list and click Attach.

5 - The token's properties page now lists the attached user.




Related Articles


  • No labels