The username should match your macOS logon name. Your users must be enrolled in Duo before logging in, and their Duo usernames must match the macOS username.Īdd your first user to Duo, either manually or using bulk enrollment. Enroll a Userĭuo's macOS authorization plugin doesn't support inline self-service enrollment.

Installing Duo for macOS without first verifying that any other installed auth plugins support Swift 5 may prevent user logins. You can restore Duo after updating your operating system with the MacLogon-Restore-2.0.0.pkg package included in the Duo for macOS 2.0.0 zip file.įor additional client security, we recommend setting a firmware password to prevent disabling Duo authentication via recovery mode.īefore installing Duo for macOS, ensure any other login mechanisms present on your Mac client support Swift 5. Upgrading macOS versions may disabled Duo's Mac Logon package. Consider updating to a newer version of macOS still supported by Apple.

11.0 (Big Sur) - first supported in 1.1.0Īs of Duo release 2.0.0, these macOS versions were not tested and may not work in the future.

12.0 (Monterey) - first supported in 1.1.0.

12.3 (Monterey) - First supported in 1.1.1.System Requirementsĭuo's Mac authorization plugin 2.0.0 supports macOS 10.15 (Catalina) and later versions, which includes: Once installed, Duo authentication is required for new console logons, but not when unlocking the screensaver or when an already logged-on user wakes the system from sleep.

Looking for SSH login protection? Try Duo Unix. Duo for MacOS doesn't add 2FA for remote SSH connections. Overviewĭuo Authentication for macOS add Duo two-factor authentication to macOS local console logins. If you use or plan to use Duo Authentication for macOS you must upgrade to version 1.1.1 or later before updating to macOS 12.3. Issues with macOS 12.3 and later and Duo Authentication for macOSĭuo Authentication for macOS versions 1.1.0 and earlier are not compatible with macOS 12.3.

How do i log into mac email online