Duo Security

The Duo Security integration with LogScale enables secure user authentication through SAML configuration and the Duo Access Gateway. Learn about essential prerequisites, including DAG installation and root account setup, along with detailed steps for configuring both LogScale and Duo Security account settings to establish secure authentication protocols.

Duo Security provides a great way of authenticating your users for your LogScale installation.

Prerequisites

Before configuring SAML authentication, ensure the following:

  • Duo Access Gateway (DAG) is installed and configured with at least one Authentication Source.

  • Make sure you have one root account added, typically by adding your email address in the user administration section of LogScale. For more information, see Manage Users.

For more information about Duo Security Single Sign-on for SAML, see Duo Single Sign-On for Generic SAML Service Providers.

Configure the Duo Security app

First, open your DAG and go to the Applications page. Take note of the SSO URL and Entity ID parameters. Save the certificate to a known location on your LogScale host.

Next, log into your Duo Security account and add a new Generic SAML Service Provider. Set the Entity ID to md:EntityDescriptor#entityID, Assertion Consumer Service to md:AssertionConsumerService#Location, and NameID Attribute to email.

Configure LogScale to use Duo Security

When Duo Security is configured to work with LogScale, you must configure LogScale to work with Duo Security.

To configure Duo Security to work with LogScale, you must set the configuration variables as described in Configure SAML for LogScale Self-Hosted.

Test the Duo Security integration setup

Once all of the necessary steps to set up the Duo Security authentication for LogScale are completed, you need to test the setup.

  1. Go to a Terminal and start LogScale with the following command:

    shell
    ./run.sh

    Allow two to three minutes for LogScale to start.

  2. Connect to localhost in a browser. It should redirect you to an Duo Security login.

  3. Sign into your Duo Security. You should be taken to LogScale.