Duo

Use these instructions to set up Duo as your SSO provider for Tonic Structural.

Duo configuration

To indicate to use Duo as an SSO provider for Structural:

1. On the Applications page, click Protect an Application.

2. On the Protect an Application page, for the Web SDK application, click Protect.

Structural configuration

To configure Duo SSO, use the following environment settings.

Most of these values are available from the application details page for Web SDK. To view the application details, on the Applications page, click Web SDK.

Application details page for Web SDK

• TONIC_SSO_PROVIDER - Duo

• TONIC_SSO_CLIENT_ID - The client ID for Web SDK. Available on the application details page for Web SDK as the value of Client ID.

• TONIC_SSO_CLIENT_SECRET - The client secret for Web SDK. Available on the application details page for Web SDK as the value of Client secret.

• TONIC_SSO_DOMAIN - The Duo domain. This is essentially the URL to your Duo instance: admin-<identifier>.duosecurity.com. Available on the application details page for Web SDK as the value of API hostname.

• TONIC_SSO_GROUP_FILTER_REGEX - Identifies the allowed groups for Structural. For details, go to Synchronizing SSO groups with Structural.