topic Re: Directory Sync custom schedule in Managing Users

Directory Sync custom schedule

jsiergiej1 — Tue, 03 Oct 2017 15:01:19 GMT

Has anyone figured out a way to initiate a directory sync other than via the sync now button or system scheduled 10am sync time? I’d like to kick off a sync automatically at a time other than set time of 10am in the DUO admin panel, which I can’t change.

We remove remote access to users for 5 days per year by automatically adding/removing them from an AD group at midnight of the day they leave/return. The scheduled sync time of 10am won’t work for us since users obviously connect at 8am or before. If the sync didn’t happen yet and they get in, we have to answer to auditors. If they’re still disabled when they return and then they can’t get in, we have to deal with support calls.

Re: Directory Sync custom schedule

Steve_M — Mon, 09 Oct 2017 20:05:28 GMT

I wanted to move our sync time as well, but was told that is not an option. I submitted a feature request. Don’t know if this is planned for a future release or not.

Re: Directory Sync custom schedule

AlexHart — Mon, 22 Jul 2019 23:51:03 GMT

I would like to request this as well.
Here’s another request: Request for the ability to adjust the sync time and interval

Re: Directory Sync custom schedule

Semicolon — Tue, 20 Aug 2019 17:00:30 GMT

Its not awesome; but you may be able to leverage the Duo Admin API to make an API to sync a single user (repeat as necessary for each user), adding that step to the annual disabling/enabling process shouldn’t be too bad.

Re: Directory Sync custom schedule

GMS.Travis.Johnson — Thu, 21 Nov 2019 17:04:18 GMT

I can’t believe that this is still an outstanding issue for a security product. Every publicly traded company that is integrating into their directory is going to need this feature to be able to handle SOX audits at a minimum. Browsing the Admin API, I’m not seeing a directory sync command, so the last resort is to reproduce the code logic that manually adds/removes users to the DUO groups outside of the directory sync. It works, but that is by no means an enterprise solution. We really need the ability to sync with an AD group more than once a day. I can see saying no to more than once an hour, but otherwise, this is just silly.

Re: Directory Sync custom schedule

bguyette — Fri, 29 Dec 2023 21:28:30 GMT

I would like to request this as well. Coming from OneLogin to Duo the syncing is already biting us. Once an hour I can explain better than sorry you missed your window until midnight.

Re: Directory Sync custom schedule

DuoKristina — Wed, 10 Jan 2024 14:37:56 GMT

Hi there. To submit feature requests for Duo please contact your Duo account exec or customer success manager. If you don't have one of these you can contact Duo Support to submit or upvote feature requests. Community posts don't automatically create feature requests for our product team.

Re: Directory Sync custom schedule

Diego Azevedo — Mon, 19 Aug 2024 01:02:16 GMT

As per the link below, you can request to be added to an "open" feature request for the ability to adjust the sync time and interval.

https://help.duo.com/s/article/2224?language=en_US

Re: Directory Sync custom schedule

johnmcaarthyy — Sat, 05 Oct 2024 01:14:32 GMT

I had the same issue with the fixed 10 am sync time in Duo, which didn’t work for our team’s early access needs. To work around this, we used the Duo Admin API to trigger syncs for individual users at custom times, though it’s not ideal. You can also reach out to your Duo account exec or support to request or upvote a feature for flexible sync schedules. It’s not perfect, but it’s a temporary fix until Duo updates this feature.
Furthermore you can see more details by visiting: https://help.duo.com/s/article/2224?language=en_US .

Re: Directory Sync custom schedule

DuoKristina — Fri, 22 Nov 2024 16:18:01 GMT

Happy to share that we've added an option for high-frequency automatic Active Directory, OpenLDAP or Entra ID user syncs in our D303 release. This will automatically start another sync about 30 minutes after the previous sync ends. Please see the "Adjust Sync Frequency" section of the documentation for your external directory type to learn how to enable.