Troubleshooting MFA with Duo

You may run into issues authenticating your strongDM account with Duo MFA enabled. This document contains some information about errors you may receive while logging in, and suggested troubleshooting steps.

When is MFA authentication needed?

You will be prompted for a strongDM MFA authentication in the following circumstances:

Authentication Errors with Duo

Error Issue Resolution
Invalid MFA configuration Your organization’s MFA configuration is not correct. Contact your strongDM administrator.
MFA refused to authenticate this user Duo has preemptively denied authentication. Contact your Duo administrator.
MFA denied access When the push alert arrived, you denied access. Log in again and choose ‘Accept’ when the push arrives.
User not enrolled in MFA You are not enrolled with Duo. Contact your Duo administrator.
MFA did not return a response in time Duo did not receive an accept/deny from your device in time. Try logging in again and accept/deny when the push arrives.
Could not find a valid MFA device Your Duo-configured device cannot receive push alerts. Contact your Duo administrator to register another device.
Could not push a notification to MFA device Duo was not able to send a push to your device. Contact your Duo administrator.

New / Reset Device

If you get a new mobile device or have to reset your existing device, you may be unable to log into your Duo-protected account. If this situation occurs, please contact your organization’s Duo administrator to provision your new/reset device. strongDM is unable to provision Duo devices.