When an end user who is enrolled in Okta only with DUO MFA attempts to use Amazon Workspaces configured with RADIUS, the flow fails. This situation results in the user receiving an error message stating:
Please check your username and password to make sure you typed them correctly. Depending on the policy of the organization, it may be necessary to enter domain/username in the username text box.
The issue highlights that DUO MFA with Push is not supported for Amazon Workspaces, and that this method of providing the MFA value as "push" will only work for Okta Verify with Push for Amazon Workspaces configured with RADIUS.
- Amazon Workspaces
- RADIUS
- Multi-Factor Authentication (MFA)
- DUO MFA with Push
- Okta Classic Engine
DUO MFA with Push is not supported for Amazon Workspaces.
The root cause of the problem lies in the incompatibility of DUO MFA with Push when attempting to use Amazon Workspaces configured with RADIUS. Since this method is only supported for Okta Verify with Push, any attempts with DUO MFA result in the above error.
- Obtain the 6-digit DUO One-Time-Password (OTP).
- Enter the OTP in the MFA field when prompted during the login process.
- Proceed with the login, ensuring that the correct username and password have been provided.
