---
title: Duo Security Integration Kit 3.x
description: The Duo Security Integration Kit allows PingFederate to use Duo Universal Prompt for multi-factor authentication (MFA). This sign-on experience uses OpenID Connect standards and does not require or support iFrames.
component: duosecurity
page_id: duosecurity:duo_security_integration_kit_3x:pf_duo_security_ik
canonical_url: https://docs.pingidentity.com/integrations/duosecurity/duo_security_integration_kit_3x/pf_duo_security_ik.html
revdate: June 7, 2024
section_ids:
  upgrade-considerations: Upgrade considerations
  features: Features
  components: Components
  intended-audience: Intended audience
  system-requirements: System requirements
---

# Duo Security Integration Kit 3.x

The Duo Security Integration Kit allows PingFederate to use Duo Universal Prompt for multi-factor authentication (MFA). This sign-on experience uses OpenID Connect standards and does not require or support iFrames.

|   |                                                                                                                                                                                                                                             |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | This documentation is for Duo Security Integration Kit 3.0 and later. For earlier versions of the integration kit, see the [Duo Security Integration Kit 2.2](../duo_security_integration_kit_22/pf_duo_security_ik_22.html) documentation. |

## Upgrade considerations

The Duo Security Integration Kit 3.0 and later no longer support the [session state](../duo_security_integration_kit_22/pf_duo_security_ik_22_duo_security_adapter_settings_reference.html) feature or the adapter session feature. If you were using the adapter session feature previously, you can configure [Authentication sessions](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_sessions.html) instead.

|   |                                                                                                                                                                                                                                                                                                                                                        |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|   | The authentication sessions feature doesn't have complete feature parity with the adapter session feature. For example, the authentication sessions feature doesn't support session sharing between composite adapters. To use authentication sessions with the Duo Security Integration Kit 3.0 and later, remove any interfering composite adapters. |

## Features

* Supports Duo's Standard Editions and [Federal Editions](https://duo.com/docs/duo-federal-guide)

* Supports Duo's OpenID Connect-enabled APIs.

* Supports the [Duo Universal Prompt](https://help.duo.com/s/article/6340) authentication experience.

* Supports the PingFederate [PingFederate authentication API](https://docs.pingidentity.com/pingfederate/latest/developers_reference_guide/pf_authentication_api.html).

* Supports the [JavaScript Widget for the PingFederate Authentication API](https://github.com/pingidentity/pf-authn-js-widget).

## Components

The Duo Security IdP Adapter:

* Allows PingFederate to redirect users to Duo Universal Prompt for a multi-factor authentication (MFA) challenge during sign on.

* Allows for MFA when single sign-on (SSO) is initiated at the identity provider (IdP) or service provider (SP).

## Intended audience

This document is intended for PingFederate administrators.

If you need help during the setup process, see the following resources:

* The following sections of the Duo Universal Prompt documentation:

  * [Getting Started with Duo Security](https://duo.com/docs/getting-started)

  * [What is the Duo Universal Prompt?](https://help.duo.com/s/article/6340)

  * [Application Options - Universal Prompt](https://duo.com/docs/protecting-applications//)

  * [Duo Universal Prompt Update Guide](https://duo.com/docs/universal-prompt-update-guide)

  * [Troubleshooting - Universal Prompt Update Progress](https://duo.com/docs/administration//)

  * [PingFederate](https://duo.com/docs/pingfederate)

* The following sections of the PingFederate documentation:

  * [Managing IdP adapters](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_managing_idp_adapters.html)

  * [Authentication policies](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_authentication_policies.html)

## System requirements

* PingFederate 10.3 or later

* A Duo Universal Prompt administrator account