Duo AuthAPI - Security Key

Mon, 14 Nov 2022 18:48:56 GMT

Using the Duo Auth API, /auth/v2/preauth, - no results are returned if the user has only a security key configured.

We are trying to prompt our users to create bypass codes, but only if they have other methods configured with Duo, however, the preauth return does not give us an indication the security key is configured.

Results are: {“response”: {“devices”: , “result”: “auth”, “status_msg”: “Account is active”}, “stat”: “OK”}

Has anyone figured out how to determine if WebAuthN security key is configured using the authapi, or is it a requirement to use the admin api -/admin/v1/users/[user_id]/webauthncredentials function to gather this information.

Thanks, Don

Re: Duo AuthAPI - Security Key

DuoKristina — Wed, 16 Nov 2022 18:31:18 GMT

No, you can’t get WebAuthn factor info from an Auth API preauth response today. Admin API will return this info for users, as you noted.

topic Re: Duo AuthAPI - Security Key in APIs

Duo AuthAPI - Security Key

Re: Duo AuthAPI - Security Key