Contents
End of Support Information
The iframe-based traditional Duo Prompt in Array AG RADIUS configurations reached its end of support on March 30, 2024. Customers must migrate to a supported Duo Single Sign-On application with Universal Prompt or a RADIUS configuration without the iframe for continued support from Duo.
We recommend you deploy Duo Single Sign-On with a generic SAML application to protect Array AG with Duo Single Sign-On, our cloud-hosted identity provider featuring Duo Central and the Duo Universal Prompt.
Another alternative is to reconfigure your existing Array radius_server_iframe Duo Authentication Proxy application so that it does not use the iframe, for example, RADIUS with Automatic Push.
Learn more about options for out-of-scope applications in the Universal Prompt update guide, and review the Duo End of Sale, Last Date of Support, and End of Life Policy.
The instructions for this solution were removed on April 2, 2025. Customers who had this configuration deployed before then and need to refer to the original instructions may contact Duo Support.
Troubleshooting
Need some help? Review troubleshooting tips for the Authentication Proxy and try the connectivity tool included with Duo Authentication Proxy 2.9.0 and later to discover and troubleshoot general connectivity issues.
Also take a look at the Array AG Frequently Asked Questions (FAQ) page or try searching our Array AG Knowledge Base articles or Community discussions. For further assistance, contact Support.
Network Diagram
- Primary authentication initiated to Array AG SSL VPN
- Array AG SSL VPN send authentication request to Duo Security’s authentication proxy
- Primary authentication using Active Directory or RADIUS
- Duo authentication proxy connection established to Duo Security over TCP port 443
- Secondary authentication via Duo Security’s service
- Duo Authentication Proxy receives authentication response
- Array AG SSL VPN access granted