https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4876832#M109 <DIV class="duo-migrated-content"><P>Hi bmcd113, Welcome to the Duo Community!</P> <P>You can automate something like this by running reports on bypass users using the API and filtering for the Bypass status on users.</P><ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://duo.com/docs/adminapi#retrieve-users"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" style="width: 32px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/190587iED33BB788201C67B/image-size/large?v=v2&amp;px=999" role="button" title="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" /></span> <A href="https://duo.com/docs/adminapi#retrieve-users" target="_blank" rel="noopener">Duo Security</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/362;"><span class="lia-inline-image-display-wrapper" image-alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191267i2802AA91D1A88FF1/image-size/large?v=v2&amp;px=999" role="button" title="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" /></span></DIV> <H3><A href="https://duo.com/docs/adminapi#retrieve-users" target="_blank" rel="noopener">Duo Admin API</A></H3> <P>The Duo Admin API provides programmatic access to administrative functionality of Duo Security’s two-factor authentication platform. Learn more.</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> <P> The output could then be exported/integrated with your mailing systems.</P> <P>Duo does not write custom code, however Duo Security has demonstration clients available on Github to call the Duo API methods. Examples are available in: Python, Java, C#, Ruby, Perl, and PHP.<BR /> You can repurpose these to your requirements.</P> <P>I will however note that Bypass mode is not intended for temporary bypass for a user that does not have their usual 2fa device, and is a security risk when used in this manner as it will also bypass policies as per the docs.</P><ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://duo.com/docs/administration-users#changing-user-status"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" style="width: 32px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/190587iED33BB788201C67B/image-size/large?v=v2&amp;px=999" role="button" title="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" /></span> <A href="https://duo.com/docs/administration-users#changing-user-status" target="_blank" rel="noopener">Duo Security</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/362;"><span class="lia-inline-image-display-wrapper" image-alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191267i2802AA91D1A88FF1/image-size/large?v=v2&amp;px=999" role="button" title="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" /></span></DIV> <H3><A href="https://duo.com/docs/administration-users#changing-user-status" target="_blank" rel="noopener">Duo Administration - Manage Users</A></H3> <P>Learn more about creating, managing, and deleting users from the Duo Admin Panel.</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> <P>I recommend you make use of Bypass codes instead for this purpose, these can be set to expire after some time or number of uses. Bypass codes are much more secure and are subject to policies.</P><ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://duo.com/docs/administration-users#generating-a-bypass-code"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" style="width: 32px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/190587iED33BB788201C67B/image-size/large?v=v2&amp;px=999" role="button" title="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" /></span> <A href="https://duo.com/docs/administration-users#generating-a-bypass-code" target="_blank" rel="noopener">Duo Security</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/362;"><span class="lia-inline-image-display-wrapper" image-alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191267i2802AA91D1A88FF1/image-size/large?v=v2&amp;px=999" role="button" title="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" /></span></DIV> <H3><A href="https://duo.com/docs/administration-users#generating-a-bypass-code" target="_blank" rel="noopener">Duo Administration - Manage Users</A></H3> <P>Learn more about creating, managing, and deleting users from the Duo Admin Panel.</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> <P>Finally, it is also possible to prevent your Helpdesk and User Administrators from putting users in the bypass mode to prevent accidental use of bypass status intended for service accounts or automated systems where 2fa is not possible.</P><ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://duo.com/docs/administration-settings#user-bypass-status-option-for-user-managers"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" style="width: 32px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/190587iED33BB788201C67B/image-size/large?v=v2&amp;px=999" role="button" title="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" /></span> <A href="https://duo.com/docs/administration-settings#user-bypass-status-option-for-user-managers" target="_blank" rel="noopener">Duo Security</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/362;"><span class="lia-inline-image-display-wrapper" image-alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191267i2802AA91D1A88FF1/image-size/large?v=v2&amp;px=999" role="button" title="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" /></span></DIV> <H3><A href="https://duo.com/docs/administration-settings#user-bypass-status-option-for-user-managers" target="_blank" rel="noopener">Duo Administration - Global Settings</A></H3> <P>Learn how to use the Duo Admin Panel to change global settings to customize your Duo experience. Continue reading for more information on phone call settings, Security checkups, Duo Restore and more</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> </DIV> Mon, 05 Jun 2023 03:03:08 GMT raphka 2023-06-05T03:03:08Z https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4876831#M108 <DIV class="duo-migrated-content"><P>Has anyone successfully setup a way to monitor and get alerts generated to an email or ticketing system if a user is placed on bypass for an extended period of time?</P> <P>We are an MSP and our techs will commonly place users on Bypass, and many times they forget to put the user back into an active status.</P> <P>Let me know if anyone has had any luck with this!</P></DIV> Fri, 02 Jun 2023 01:30:43 GMT https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4876831#M108 bmcd113 2023-06-02T01:30:43Z https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4876832#M109 <DIV class="duo-migrated-content"><P>Hi bmcd113, Welcome to the Duo Community!</P> <P>You can automate something like this by running reports on bypass users using the API and filtering for the Bypass status on users.</P><ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://duo.com/docs/adminapi#retrieve-users"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" style="width: 32px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/190587iED33BB788201C67B/image-size/large?v=v2&amp;px=999" role="button" title="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" /></span> <A href="https://duo.com/docs/adminapi#retrieve-users" target="_blank" rel="noopener">Duo Security</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/362;"><span class="lia-inline-image-display-wrapper" image-alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191267i2802AA91D1A88FF1/image-size/large?v=v2&amp;px=999" role="button" title="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" /></span></DIV> <H3><A href="https://duo.com/docs/adminapi#retrieve-users" target="_blank" rel="noopener">Duo Admin API</A></H3> <P>The Duo Admin API provides programmatic access to administrative functionality of Duo Security’s two-factor authentication platform. Learn more.</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> <P> The output could then be exported/integrated with your mailing systems.</P> <P>Duo does not write custom code, however Duo Security has demonstration clients available on Github to call the Duo API methods. Examples are available in: Python, Java, C#, Ruby, Perl, and PHP.<BR /> You can repurpose these to your requirements.</P> <P>I will however note that Bypass mode is not intended for temporary bypass for a user that does not have their usual 2fa device, and is a security risk when used in this manner as it will also bypass policies as per the docs.</P><ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://duo.com/docs/administration-users#changing-user-status"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" style="width: 32px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/190587iED33BB788201C67B/image-size/large?v=v2&amp;px=999" role="button" title="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" /></span> <A href="https://duo.com/docs/administration-users#changing-user-status" target="_blank" rel="noopener">Duo Security</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/362;"><span class="lia-inline-image-display-wrapper" image-alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191267i2802AA91D1A88FF1/image-size/large?v=v2&amp;px=999" role="button" title="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" /></span></DIV> <H3><A href="https://duo.com/docs/administration-users#changing-user-status" target="_blank" rel="noopener">Duo Administration - Manage Users</A></H3> <P>Learn more about creating, managing, and deleting users from the Duo Admin Panel.</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> <P>I recommend you make use of Bypass codes instead for this purpose, these can be set to expire after some time or number of uses. Bypass codes are much more secure and are subject to policies.</P><ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://duo.com/docs/administration-users#generating-a-bypass-code"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" style="width: 32px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/190587iED33BB788201C67B/image-size/large?v=v2&amp;px=999" role="button" title="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" /></span> <A href="https://duo.com/docs/administration-users#generating-a-bypass-code" target="_blank" rel="noopener">Duo Security</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/362;"><span class="lia-inline-image-display-wrapper" image-alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191267i2802AA91D1A88FF1/image-size/large?v=v2&amp;px=999" role="button" title="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" /></span></DIV> <H3><A href="https://duo.com/docs/administration-users#generating-a-bypass-code" target="_blank" rel="noopener">Duo Administration - Manage Users</A></H3> <P>Learn more about creating, managing, and deleting users from the Duo Admin Panel.</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> <P>Finally, it is also possible to prevent your Helpdesk and User Administrators from putting users in the bypass mode to prevent accidental use of bypass status intended for service accounts or automated systems where 2fa is not possible.</P><ASIDE class="onebox allowlistedgeneric" data-onebox-src="https://duo.com/docs/administration-settings#user-bypass-status-option-for-user-managers"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" style="width: 32px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/190587iED33BB788201C67B/image-size/large?v=v2&amp;px=999" role="button" title="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" alt="2X_a_acd38338609d3fcb6a2ee975ad2eb68bd6d33cb5.png" /></span> <A href="https://duo.com/docs/administration-settings#user-bypass-status-option-for-user-managers" target="_blank" rel="noopener">Duo Security</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/362;"><span class="lia-inline-image-display-wrapper" image-alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191267i2802AA91D1A88FF1/image-size/large?v=v2&amp;px=999" role="button" title="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" alt="1X_59aa89a0f991dff07b1e7f1cea48969c74b194fa.jpeg" /></span></DIV> <H3><A href="https://duo.com/docs/administration-settings#user-bypass-status-option-for-user-managers" target="_blank" rel="noopener">Duo Administration - Global Settings</A></H3> <P>Learn how to use the Duo Admin Panel to change global settings to customize your Duo experience. Continue reading for more information on phone call settings, Security checkups, Duo Restore and more</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> </DIV> Mon, 05 Jun 2023 03:03:08 GMT https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4876832#M109 raphka 2023-06-05T03:03:08Z https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4914168#M1289 <P>Can you advise what the api call is for bypass please?</P> Tue, 29 Aug 2023 19:13:01 GMT https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4914168#M1289 richardjs 2023-08-29T19:13:01Z https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4914514#M1291 <P>If you look at the <A href="https://duo.com/docs/adminapi#retrieve-usershttps://duo.com/docs/adminapi#retrieve-users" target="_self">Admin API "Retrieve Users" response</A> you'll see `status` listed as one of the parameters.</P> Wed, 30 Aug 2023 11:40:03 GMT https://community.cisco.com/t5/managing-users/monitor-users-placed-on-bypass/m-p/4914514#M1291 DuoKristina 2023-08-30T11:40:03Z