Blog

Critical DPR Upgrade for DUO Users

Author

  • vivek_shrivastava

    SailPoint

Dear Valued Customers,

We want to inform you about an important update regarding our Password Management Services, specifically the integration with DUO Multi-factor Authentication (MFA) and its impact on Desktop Password Reset (DPR) functionality.

Recently, DUO has implemented changes to its MFA application, deprecating its traditional iFrame-based prompt for two-factor authentication. Kindly revisit your IdentityNow DUO configuration for Web SDK under connections -> integrations.

If your existing config. is as per Duo Web SDK, you do not need to create a new one to migrate to Web SDK4. But, if you have been using Duo Auth API settings then kindly migrate to Duo Web SDK settings.

For details, you can refer to the following links:

At SailPoint, we are dedicated to adopting and supporting the latest versions of integrated systems. Consequently, we are required to incorporate the latest DUO Software Development Kits (SDKs) into our Password Management Services.

Impact on DPR Customers:

Customers using Desktop Password Reset in conjunction with DUO will need to install the latest version of our DPR application, specifically version 20.0.2. This update is necessary to accommodate the changes introduced by DUO.

You can find the latest DPR application here: https://community.sailpoint.com/t5/Shared-Documents/Desktop-Password-Reset/ta-p/78238

Please note that the DPR configuration should be adjusted to allow access to the 'duosecurity.com' domain. For more details, please refer to our "Configure Allowed Domains" section in the documentation.

It's important to note that the deadline for updating to the new DPR app is February 29, 2024. After this date, the changes for the new DUO SDK will be released with the Password Management Service. Customers using a DPR version lower than 20.0.2 along with DUO will experience adverse impacts.

If you have any questions or require assistance, please don't hesitate to reach out to our dedicated support team. We are here to ensure a smooth transition and address any concerns you may have.

Thank you for your continued support and cooperation.

Additional Information: Desktop Password Reset version 20.0.2 ensures compatibility with the updated Password Management solution. The Password Management solution is scheduled to update the Duo integration APIs to support Duo multi-factor authentication. This update may disrupt some Desktop Password Reset functions when used with a Password Management solution that is configured to use Duo for multi-factor authentication.

If your Password Management solution is configured to use Duo for multi-factor authentication, be sure to update Desktop Password Reset to version 20.0.2

Additionally, this release addresses several known issues and upgrades the Chromium engine framework to the latest version.

Sincerely,

Desktop Password Reset Team