5. The next step is to create an authentication rule to handle the requests for Duo authentication. See the example below. Fill in the fields as explained in the table below the image.
Field Name
Explanation
Name
Add a suitable name for the rule – it could be something like RADIUS-Duo-Rule.
Description
Optional, this is the description for the rule.
Root Domain
Optional, unless you wish to use single-sign-on across sub-domains.
Authentication Server
A drop-down field – select the name of the Authentication Server you created in the previous steps.
Client Authentication
A drop-down field – select Forms
Server Authentication
A drop-down field – select None
Form
A drop-down field – select Default
Message
Will use the value to display a message on the form shown to the user. An example may be "RADIUS-Duo 2FA."
Timeout
The value is specified in seconds, after which the user will need to authenticate again.
