Summary (TL;DR): This article provides step-by-step instructions for configuring Single Sign-On (SSO) using Duo.
Prerequisites:
Administrator access to the Duo Admin Panel.
Superuser or Administrator permissions in Procurify.
How do I configure the application in the Duo Admin Panel?
To begin the integration, the administrator must create a new application record within Duo to generate the necessary credentials for Procurify.
Log in to the Duo Admin Panel.
Navigate to Applications > Protect an Application.
Search for Generic OIDC Relying Party and select Add.
Locate the General tab.
In the Redirect URIs field, enter the following URL exactly: https://login.procurify.com/login/callback
Select Save at the bottom of the page.
Navigate to the Metadata tab.
Copy the three values listed in the table below; these are required for the configuration within Procurify.
Metadata Field | Description |
Client ID | The unique identifier for the Procurify application in Duo. |
Client Secret | The confidential security key used for authentication. |
Discovery URL | The endpoint Duo uses to provide configuration details. |
How do I enable Duo SSO in Procurify?
After capturing the credentials from the Duo Admin Panel, the administrator must input the metadata into the Procurify platform to activate the connection.
Sign in to Procurify as an administrator.
Navigate to Settings > Security and authentication: SSO.
Locate the Duo card and select Set up.
Enter the Client ID, Client Secret, and Discovery URL obtained from the Duo Metadata tab.
Select Save to finalize the configuration.
Next Steps
Once the connection is saved, administrators must provision user access within Duo. Ensure that the email addresses in Duo match the user email addresses registered in Procurify to allow successful authentication. Users can now select the Duo option on the Procurify login page.
Keywords: Duo, SSO, Single Sign-On, Authentication, OIDC, Security, Identity Provider, Client ID, Discovery URL