Duo.com

Overview

Duo.com is a plugin that can be used for both Staff Memeber and Clients to use Duo service to provide simple two-factor authentication via the tool of your choice: phone callback, SMS-delivered one-time passcodes, Duo mobile app to generate one-time passcodes, Duo mobile app for smartphone push authentication or Duo hardware token to generate one-time passcodes.

Activating the module

1. If the plugin is included in your HostBill edition you can download it from your client portal.
2. If the plugin is not included in your HostBill edition you can purchase it from our marketplace and then download it from the client area.
3. Once you download the plugin extract it in the main HostBill directory.
4. Go to Settings → Modules, find and activate Duosecurity2 plugin.
5. Once the plugin is activated you will be directed to Settings→ Modules→ Plugins to configure the plugin.

Module configuration

1. Choose module display name
2. Select if you want the widget to be accessible for all staff members or only selected staff members
3. Enter Integration Key
4. Enter Secret Key
5. Enter API Hostname
6. Choose Admin Username type
7. Choose Client Username type

How to obtain details for module configuration

You will need to set up an account in Duo administration interface to obtain Integration Key, Secret Key, and API hostname. Double check your integration while setting it up in HostBill, if you don't provide valid details you may get locked out from your admin area. If that happens your only option is to remove this plugin.

This integration works with both Duo free and paid accounts.

1. Sign up for a Duo account.
2. 
3. Log in to the Duo Admin Panel and navigate to Applications.
4. Click Protect an Application and locate the entry for Auth API in the applications list. Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname. You'll need this information to complete your setup. 

Using the module

Once the module is configured it can be activated by admins in My Profile section and by clients and client contacts in Security → Multi-factor authentication. To activate enter information about your device and your phone number, activate DuoApp.

Next choose if you want to use a Push notification or a passcode sent via text message or via Duo App. Once you enter the passcode the module will be activated.

After configuring DuoSecurity factor authentication, during the logging in to the system, an authorization page appears in which you must authorize using DuoSecurity passcodes.