360Score.me 2FA Options: DUO 2FA Setup

In a time where online security is of the utmost importance, 360Score.me recognizes the sensitivity of peer review data and how crucial it is to protect that data. This article will walk your organization through activating DUO 2FA within 360Score.me. 

Prior to activating DUO 2FA within 360Score.me, you must first add 360Score.me as a protected application within your organization's DUO account. To do this, have your organization's DUO Admin sign in to DUO and navigate to Applications and select Protect an Application.

Use the search bar to locate the Web SDK Application and select Protect.

Under Details, you will see 3 items – Integration Key, Secret Key and API Hostname. Please make note of these as you will

need these 3 items later in the process to activate DUO within 360Score.me.

Please continue the DUO Setup with the Standard Global Policy for your company.

Once you reach the Settings portion of the setup, we recommend you change the name of the protected application to "360Score.me". That will make this application easily recognizable for users when prompted by DUO. 

Make sure you have selected "Simple" for Username normalization. 

Once these settings have been updated, click Save at the bottom of this screen. 360Score.me will now be a protected application within DUO. You will now be able to see this listed under your Applications within DUO, and you can proceed to setup DUO 2FA within 360Score.me.

Once 360Score.me has been activated as a protected application and the Client ID, Client Secret, and API hostname have been generated, your organization's 360Score.me Super Admin will be able to activate DUO 2FA within 360Score.me. 

Upon sign in, the Super Admin can navigate to Account Settings, then to DUO 2FA after sign in.

Within this page, the Client ID, Client Secret, and API hostname can be entered. These were generated during the DUO Admin portion of the setup, and can be copied and pasted into 360Score.me. 

Once the requested keys and hostname have been entered, DUO 2FA can be enabled by selecting the checkbox next to "Enable DUO 2FA..." The Super Admin can then activate DUO 2FA for each employee that requires it by selecting Setup 2FA Method for each employee. 

Once selected, a popup window will appear allowing the Super Admin to activate DUO 2FA for an employee. The Super Admin will also have the option to leave 2FA as unrequired for any employee. Once updates have been made for the organization's employees, clicking Apply Changes will apply these updates.  

After the necessary employees have had DUO 2FA enabled for them, the DUO setup process can be completed by clicking Update 2FA Settings. 360Score.me will notify you that the DUO 2FA has been set up and activated!

Any employees for whom the DUO 2FA has been activated will now be prompted to sign in using DUO going forward.