Getting " Cannot complete your request" after duo push is successfully sent. In the url tab, we could see the client  connection being pointed to storefront successfully

• Verify the storefront event viewer is seeing the correct credentials and failing due to single sign on event
  
• Modify the corresponding Login Schema: 

              User Credential Index: 1 ​​​​​​​

              Password Credential Index: 2

• Create a new Traffic Policy with expression "true" , set the single sign-on settings to "ON"  and define these in the Profile:
  
  SSO User Expression: AAA.USER.ATTRIBUTE(1)
  SSO Password Expression: AAA.USER.ATTRIBUTE(2)

• Bind the traffic policy to the Gateway Virtual Server

Problem Cause

This issue can occur because the needed credentials aren't properly passed through to StoreFront.