We are trying to setup duo 2FA for vCenter. We set up a service account to do AD over ldap, pointing to duo auth proxy which in turn pointing to AD. The logs shows the service account is exempted from 2FA and we are able to search AD for permission configuration. But duo just does not send a push but it fails the authencation attempt right away with "Invalid credential". I know this duo auth proxy itself works just fine with a lot of other services.