Secure Access and DUO user/group integration

[Maciej Waliszko]

Hey,

Can anyone know why SA is only able to integrate with Okta/Azure to download user/group info and not with DUO?

There is an option to integrate with "other IdP" but I am not able to find the info about the integration with DUO. Can someone tell me if this is possible and how to do it?

[howe]

DUO is not an idp as such, it is typically integrated with Azure etc.  This is unlike OKTA which is, and as such offers the ability to provision users from it.  There are sound security reasons why you don't want your MFA to also be your idp, however I appreciate that this makes things more complicated. As such, for labs/demos I tend to use Okta or Azure for simplicity. 

James