Introduction

DUO (https://duo.com) is a popular identity verification platform. You can use it in MSP Process to acheive two goals:

• To secure the login process of anyone looking to access your MSP Process account at https://app.mspprocess.com. This capability requires the DUO Web SDK to be configured. 
• During the end-user verification process; DUO can be used instead of sending the user a verification code via e-mail or SMS. This capability requires the DUO Auth API and Admin API to be configured. Click here for the KB article that outlines how to set this up.

This KB article will take you through all of the steps required to do the first scenario - to use DUO to secure how your technicians login to the MSP Process platform. 

Step 1: Configuring the Web SDK Entity in DUO

What is the DUO Web SDK? The Duo Web SDK adds the two-factor authentication screens and workflow to the MSP Process login flow.

How is the Web SDK Used? This module only needs to be setup if you want to use DUO to secure how you and your techs login to the MSP Process platform. It is not required if you only plan on using DUO for End-User Verification.

1. Login to the DUO Admin portal (https://admin.duosecurity.com/)
2. From the left-hand menu, navigate to Application -> Protect an Application
3. Search for "Web SDK" in the Search field
4. Click on the Protect button beside Web SDK
5. In the Details section, copy the Client ID, Client Secret and API Hostname; you'll need them later
6. In the Settings section, change Name field to say "MSP Process"
7. Click Save

Step 2: Integrating MSP Process with DUO

1. Login to the MSP Process portal (https://app.mspprocess.com)
2. Navigate to Integrations -> Security Integrations
3. Click the Add new integration button

     4. Click the DUO Web SDK button; specify a name, and then enter the Integration Key, Secret Key and API Hostname from Step #2.

     5. Click Submit when you're done.

Step 3: Configuring Your MSP Process User Account To Use DUO During The Login Process

1. From the MSP Process UI, click on the Profile button in the top right-hand corner of the UI
   • 
2. Enable the Link DUO feature
   • 
3. Follow the on-screen prompts from DUO that will link your MSP Process account to DUO
   • 
4. Once you've gone through the DUO screens, and have been returned to the MSP Process UI, click Submit

Congratulations! You're Done!

You've now setup the required entities in DUO and configured MSP Process with the information it needs to start using DUO to secure the login process to your MSP Process UI.

Go to Account Settings -> Billing as shown below and click on the edit button. 

Select the plan you'd like to upgrade to on the left side and then fill out the information on the right. Be sure to include a Dealer code if you have been given one by the team. 

End User Verification - ConnectWise Pod

Context:

Recent changes made by DUO have made it so that their Universal Prompt cannot be rendered in an iframe. The main UI of the MSP Process platform is not affected by this change, but our PSA-embedded Pod (ConnectWise and Halo PSA) and Insight (Autotask) are affected, as they are iframes within the UI of those PSA platforms.

This KB article guides you through how to change your DUO configuration for MSP Process to use DUO's "traditional" prompt, which will allow you to continue to securely login to the MSP Process Pod/Insight when you've chosen to use DUO as your MFA provider.

Instructions:

1. Login to your DUO admin panel (the URL will be something like https://admin-<GUID>.duosecurity.com/ )
2. Click on the Applications menu
   1. 
3. Find the Web SDK entry for MSP Process, and edit it
   1. 
4. Under the Universal Prompt section, choose the Show traditional prompt option
   1. 
5. At the bottom of the page, click the Save button

Conclusion:

You've now successfully configured your DUO tenant to use their traditional promp for the MSP Process platform. You'll find that your login experience does look different, as DUO's traditional prompt has a different look and feel:

Introduction

DUO (https://duo.com) is a popular identity verification platform. You can use it in MSP Process to acheive two goals:

• To secure the login process of anyone looking to access your MSP Process account at https://app.mspprocess.com. This capability requires the DUO Web SDK to be configured. Click here for the KB article that outlines how to set this up.
• During the end-user verification process; DUO can be used instead of sending the user a verification code via e-mail or SMS. This capability requires the DUO Auth API and Admin API to be configured.

This KB article will take you through all of the steps required to do the second scenario - to use DUO to verify your end-users, including setting up 2 entities in DUO (their Auth API and Admin API entities) and configuring the appropriate settings within MSP Process.

Step 1: Configuring the Auth API Entity in DUO

What is the DUO Auth API? The DUO Auth API is a low-level, RESTful API for adding strong two-factor authentication to the MSP Process website.

1. If you're already logged into the DUO Admin portal, proceed to step #2. Otherwise, please login to the DUO Admin portal (https://admin.duosecurity.com/)
2. From the left-hand menu, navigate to Application -> Protect an Application
3. Search for "Auth API" in the Search field
4. Click on the Protect button beside DUO Auth API
5. In the Details section, copy the Integration Key, Secret Key and API Hostname; you'll need them later
6. In the Settings section, change Name field to say "Auth API for MSP Process"
7. Click Save

Step 2: Configuring the Admin API Entity in DUO

What is the DUO Admin API? The DUO Admin API is a low-level, RESTful API for querying DUO for information about objects, such as end users.

1. If you're already logged into the DUO Admin portal, proceed to step #2. Otherwise, please login to the DUO Admin portal (https://admin.duosecurity.com/)
2. From the left-hand menu, navigate to Application -> Protect an Application
3. Search for "Admin API" in the Search field
4. Click on the Protect button beside DUO Admin API
5. In the Details section, copy the Integration Key, Secret Key and API Hostname; you'll need them later
6. In the Settings section, change Name field to say "Admin API for MSP Process"
7. In the Permissions section, assign the Grant resource -> Read permission
   • 
     
8. Click Save

Step 3: Configuring MSP Process to Use DUO

1. Login to the MSP Process portal (https://app.mspprocess.com)
2. Navigate to Integrations -> Security Integrations
3. Click the Add new integration button

     4. Click the DUO Auth API button; specify a name, and then enter the Integration Key, Secret Key and API Hostname from Step #2. Click Submit when you're done.

     5. Repeat steps 3 and 4 for the DUO Admin  

Congratulations! You're Done!

You've now setup the required entities in DUO, and configured MSP Process with the information it needs to start using DUO to verify the identity of your end-users.

If you need to whitelist our IP or domains they are shown below: 

https://pod.mspprocess.com

https://app.mspprocess.com

https://api.mspprocess.com

Login to your lastpass vault and click on Advanced. Then turn off "Use Improved save and fill".