MFA WebGui with Duo or other SAML IDPs
-
Hi there,
i may be too ambitious about security, but admin login to fw with MFA is a must...
I was able to find:
- Re: MFA WebGUI access using Cisco ISE and DUO auth
- https://github.com/jasonbeitler/www/wiki/PFSense-and-Duo-2FA (authproxy method)
- https://www.freshports.org/security/duo/ (Unix integration package --> preferred)
so there is a freebsd port of the preferred solution, just needs to be added to the officia pfsense repo and might need some testing..
I am using the unix integration package already on some servers (debian/redhat) and this is working out of the box.anyone already tried to implement this?
I'm not very familiar with pfsense images, may I need some support from you guys
cheers