Hi,
I have been tasked with creating a Password Reset function to allow users to reset their AD Password. One of the ask was to allow for DUO authentication. Using the OOB Password Reset and the OOB Authenticator options works, but the issue is they don't want the user to have to put in a OTP to authenticate. They want it to push DUO to the user. Also, they only want the users to have the option of using DUO only. They cannot have the option of using any other authenticator. Our company uses only DUO so from the moment you are hired you are required to install DUO, so they don't want the user to have to enroll in DUO.
I realize that I would need to create a custom Password Reset Verification Type that creates an API call to DUO. Has anyone ever done this kind of integration?
If so, how did you go about it?
