How to Configure Two-Factor Authentication using Duo LDAP
You can use the Duo LDAP server as the secondary authentication source along with a Microsoft Active Directory (AD) or RADIUS server as the primary source. With Duo LDAP, the secondary authentication validates the primary authentication with a Duo passcode, push notification, or phone call..
The following topics explain the configuration in more detail: