Started testing the new Duo OAuth setup. It seems...
# citrix-netscaler
j
Started testing the new Duo OAuth setup. It seems to capture the SSO flag even though the LDAP is setup with a Login Schema as default. Anyone else gone through the setup process yet? If I switch the secondary from oauth to radius it works fine. Flip it back to oauth and it fails.
Found the issue. Looks like Oauth was setting the default password attribute, even though the Login Schema was not set to SSO. We set the login schema on the ldap to store username and password to 15 and 16, then created a traffic policy on the gateway to use those fields for username and password. Going to open a ticket as this may be a bug with the new oauth implementation. https://support.citrix.com/s/article/CTX219481-sso-fails-when-nfactor-is-used-adc?language=en_US