https://community.cisco.com/t5/managing-users/new-users/m-p/5232887#M1437 <P>If you've chosen to protect your email with Duo then you can't have them use emailed enrollment links for their first-time registration without allowing access to the mail system without 2FA.</P> <P data-unlink="true">If you are protecting Google Workspace with Duo then you must have deployed Duo SSO using Active Directory authentication, and then federated Google to Duo? If so, consider enabling <A href="https://duo.com/docs/duo-central" target="_self">Duo Central for Duo SSO</A>. Your users can visit the Duo Central URL (<FONT face="courier new,courier">https://yourssodomain.login.duosecurity.com/central</FONT>), log in with their AD creds, and complete first-time Duo enrollment there.<BR /><BR />If you aren't using Duo SSO, how have you integrated Duo with Gmail?</P> Thu, 05 Dec 2024 13:56:27 GMT DuoKristina 2024-12-05T13:56:27Z https://community.cisco.com/t5/managing-users/new-users/m-p/5232619#M1436 <P>Good afternoon,</P><P>&nbsp;</P><P>We enforce Cisco Duo via AD.&nbsp; When a new user is created and they try to sign in to Gmail; it expects Cisco duo but they haven't configured that yet.&nbsp; We don't want to put each personal manually into bypass until they are signed up.&nbsp; How do you work around this issue?&nbsp; Thanks!</P> Wed, 04 Dec 2024 20:55:36 GMT https://community.cisco.com/t5/managing-users/new-users/m-p/5232619#M1436 nickpsh 2024-12-04T20:55:36Z https://community.cisco.com/t5/managing-users/new-users/m-p/5232887#M1437 <P>If you've chosen to protect your email with Duo then you can't have them use emailed enrollment links for their first-time registration without allowing access to the mail system without 2FA.</P> <P data-unlink="true">If you are protecting Google Workspace with Duo then you must have deployed Duo SSO using Active Directory authentication, and then federated Google to Duo? If so, consider enabling <A href="https://duo.com/docs/duo-central" target="_self">Duo Central for Duo SSO</A>. Your users can visit the Duo Central URL (<FONT face="courier new,courier">https://yourssodomain.login.duosecurity.com/central</FONT>), log in with their AD creds, and complete first-time Duo enrollment there.<BR /><BR />If you aren't using Duo SSO, how have you integrated Duo with Gmail?</P> Thu, 05 Dec 2024 13:56:27 GMT https://community.cisco.com/t5/managing-users/new-users/m-p/5232887#M1437 DuoKristina 2024-12-05T13:56:27Z