Duo

Use these instructions to set up Duo as your SSO provider for Tonic Structural.

Duo configuration

To indicate to use Duo as an SSO provider for Structural:

1. On the Applications page, click Add application.

1. In the application types list, click Web SDK.

1. On the application details page, configure the application.

You will use the following values in the Structural configuration:

• Client ID - The client identifier for Web SDK.

• Client secret - The client secret for Web SDK.

• API hostname - The Duo domain, which is essentially the URL to your Duo instance: admin-<identifier>.duosecurity.com.

Structural configuration

To configure Duo SSO, use the following environment settings.

• TONIC_SSO_PROVIDER - Duo

• TONIC_SSO_CLIENT_ID - The client ID for Web SDK. This is the value of Client ID.

• TONIC_SSO_CLIENT_SECRET - The client secret for Web SDK. This is the value of Client secret.

• TONIC_SSO_DOMAIN - The Duo domain. This is the value of API hostname.

• TONIC_SSO_GROUP_FILTER_REGEX - Identifies the allowed groups for Structural. For details, go to Synchronizing SSO groups with Structural.