Skip to main content



Cisco Defense Orchestrator

Two-Factor Authentication

This article provides information about the two-factor authentication for RA VPN.

You can configure two-factor authentication for the RA VPN. With two-factor authentication, the user must supply a username and static password, plus an additional item such as an RSA token or a Duo passcode.
Two-factor authentication differs from using a second authentication source in that two-factor is configured on a single authentication source, with the relationship to the RSA/Duo server tied to the primary authentication source.

The system has been tested with RSA tokens, and Duo passcode pushed to mobile for the second factor in conjunction with any RADIUS or AD Server as the first factor in the two-factor authentication process.

  • Was this article helpful?