In this video, I describe the steps involved in using the Duo Authentication Proxy and a RADIUS server to protect your pfsense login with multi-factor authentication.
I followed the steps pretty much the way you had them, but for some reason, I can't get pfsense to auth against Duo. Running the diagnostic in pfsense I can hit the AD using NPS Radius just fine (for the last several years). I added the Duo, with same settings in the Duo config, and I get the client notification on my phone, but then after that it fails to complete the login. Did you run into anything like that?
![Run Away - Tzuyu(TWICE) ツウィ 쯔위 [Music Bank] | KBS WORLD TV 240906](http://i.ytimg.com/vi/KnHNNyAYiu0/mqdefault.jpg)
I followed the steps pretty much the way you had them, but for some reason, I can't get pfsense to auth against Duo. Running the diagnostic in pfsense I can hit the AD using NPS Radius just fine (for the last several years). I added the Duo, with same settings in the Duo config, and I get the client notification on my phone, but then after that it fails to complete the login. Did you run into anything like that?
That's interesting. Is it successful in the diagnostics?