# Duo implementation without keycloak
**URL:** https://discourse.openondemand.org/t/duo-implementation-without-keycloak/1008
**Category:** Get Help
**Tags:** question
**Created:** [July 10, 2020, 7:13pm UTC](https://discourse.openondemand.org/t/duo-implementation-without-keycloak/1008 "2020-07-10T19:13:43Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@bp85](https://discourse.openondemand.org/u/bp85)
#### Post date: [July 10, 2020, 7:13pm UTC](https://discourse.openondemand.org/t/duo-implementation-without-keycloak/1008/1 "2020-07-10T19:13:43Z")
Hi,
Is there a way to implement Duo 2FA without keycloak?
Duosecurity provides ruby libraries for web application - [https://github.com/duosecurity/duo\_ruby](https://github.com/duosecurity/duo_ruby).
How can I implement this with OOD?
Thanks,
Bhanu
---
### Author:  [@mario](https://discourse.openondemand.org/u/mario)
#### Post date: [July 13, 2020, 3:17am UTC](https://discourse.openondemand.org/t/duo-implementation-without-keycloak/1008/2 "2020-07-13T03:17:11Z")
Hey @bp85
There isn’t a way to do this natively within OOD currently due to the architecture. Delegating this to an identity provider is probably the best bet here.
Best,
Mario
---
### Author:  [@efranz](https://discourse.openondemand.org/u/efranz)
#### Post date: [July 13, 2020, 12:26pm UTC](https://discourse.openondemand.org/t/duo-implementation-without-keycloak/1008/3 "2020-07-13T12:26:25Z")
@bp85 what authentication method are you using with Apache?
---
### Author:  [@bp85](https://discourse.openondemand.org/u/bp85)
#### Post date: [July 13, 2020, 2:38pm UTC](https://discourse.openondemand.org/t/duo-implementation-without-keycloak/1008/4 "2020-07-13T14:38:56Z")
Hi @efranz,
currently we’re using Basic Auth with LDAP.
Does OOD support Single-Sign-On?
---
### Author:  [@efranz](https://discourse.openondemand.org/u/efranz)
#### Post date: [July 13, 2020, 2:54pm UTC](https://discourse.openondemand.org/t/duo-implementation-without-keycloak/1008/5 "2020-07-13T14:54:29Z")
OnDemand works with any federated authentication option for Apache. So mod\_auth\_shib, mod\_auth\_openidc, mod\_auth\_cas. We are shipping 1.8 with Dex as an optional authentication solution, which is a light weight OpenID Connect IDP that is more robust than basic auth, and may support 2FA in the future.
[https://osc.github.io/ood-documentation/master/authentication/overview.html](https://osc.github.io/ood-documentation/master/authentication/overview.html)
---
### Author:  [@westburg.2](https://discourse.openondemand.org/u/westburg.2)
#### Post date: [May 26, 2022, 3:43pm UTC](https://discourse.openondemand.org/t/duo-implementation-without-keycloak/1008/6 "2022-05-26T15:43:12Z")