MFA (DUO) integration with ADFS - vSphere

ZalanVM — Thu, 13 Oct 2022 11:12:51 GMT

Hi!

I've been following the fantastic video from Bill (https://blogs.vmware.com/customer-experience-and-success/2022/06/tam-lab-enabling-mfa-in-vsphere-7.html ) to create a new lab with the same setup (ADFS with DUO).

Setup:

vSphere 7.0.3.00700

Windows Server 2019 with ADFS

I setup everything and the integration between ADFS and vSphere works correctly. I can authenticate with ADFS in vSphere.

As soon as I change the Access Policy to require MFA (DUO), I receive the popup in my device, but when I accept the login I get the following error in the ADFS page:

Error details: MSIS7065: There are no registered protocol handlers on path /adfs/oauth2/authorize/ to process the incoming request.

One thing I've noticed is that the videos from Bill are from June 2022, but as of now, DUO no longer embeds the iframe in the ADFS page, it always redirects the browser to api-xxxxxxxxx.duosecurity.com. I'm not sure if this might be the issue, just pointing out.

Is there anyone that has DUO currently working with vSphere through ADFS?

ZalanVM Tracker

MFA (DUO) integration with ADFS - vSphere