Duo MFA

[dbell]

Greetings,

I have followed Duo Mobile's instructions to set up MFA for my OpenVPN server. This currently works via the browser without issue. I can make it work for the client as well by downloading a user locked client configuration from the web interface and replacing the existing client config file. I do not want to have to edit the config file for each user in that manner though and want my users to be able to download the installer and have it work with MFA. Currently the difference between the two configuration files are a few certificate keys and an RSA Digital Signature.

The users are not set to auto login via the GUI. I also do not have anything in the server or client config directives. Does anyone have any advice?