Duo support in CLI? about cli HOT 15 CLOSED

@ktreese It is still TODO. We finally got approved by Duo for support on their HTTP API, so we can look at this now again whenever I get some time.

from cli.

It's not supported today because the Duo flow for a non-GUI interface is much different than what we use for all the other apps that do have a GUI (Duo Web SDK).

For now, a backup 2FA method (Auth app, email, or Yubikey) is required.

from cli.

@kspearrin I don't know the internals of BW (specifically around the way you hook into your auth js library), but I can write a working Duo end-to-end example that you can just plug in. Would this be helpful? I am assuming you have a lot going with everything else - I definitely want to help if I can with this (we would use it heavily)

from cli.

I'm waiting to hear back from Duo about some issues regarding support this via Duo Auth API from the CLI.

from cli.

@kspearrin Thanks! Let me know if I can help somehow. If you want, check out LastPass-CLI too -- they have Duo auth implemented from the CLI (https://github.com/lastpass/lastpass-cli)

from cli.

Hello @kspearrin @ventz It would seem this is still outstanding. Is there still not an available means of using the cli for Duo users? Thanks!

from cli.

@kspearrin That's great!!

from cli.

Any word on this? I am in this same boat.

from cli.

I looked into this again, and it appears that Duo still has not properly enabled the Bitwarden application to use the Auth API. I have sent them another email requesting an update.

from cli.

Thanks, Kyle. We were trying to implement this into one of our apps and this is stopping us at the moment.

from cli.

@atbtechgit The workaround would be to enable another supported 2FA option on the account you are trying to use with the CLI.

from cli.

Would I be able to do that? Duo is setup at the org wide level.

from cli.

Yes, you can still use another 2fa method. You just can't not use 2FA if the org has setup Duo, since that option will always be provided.

from cli.

Thanks, Kyle. That does seem to work. Is there any way to auto-authenticate using Authy or something? Basically, I need to pass my auth token into my app when I am trying to login. I'm not sure if this has been done before.

from cli.

Hi ventz,
We're cleaning up our repositories in preparation for a major reorganization. Issues from last year will be marked as stale and closed after two weeks. If you still need help, comment to let us know and we'll look into it.
Thanks!

from cli.