Managing Users
Connect with other Duo members and pick up tips on how to create, edit, and manage Duo users.
395 PostsActivity in Duo Security
Duo Universal Prompt - (lack of) Default Device option
Hello, I’ve been attempting to move to the Universal Prompt for years, but there has always been technical blockers. With the announcement that support for the Traditional Prompt is ending in the coming months, I’m growing in concern that gaps I’ve ...
DUO OWA 2.2 App & 404 Errors through Reverse Proxy
Hi All, I am running Exchange 2019 on Server 2019 with the latest CU 13. My configuration is that my exchange server is behind an IIS reverse proxy using url rewrite to rewrite the subdomain back to the exchange server. I do not have any restrictio...
Implement DUO for an application that can't natively implement MFA
Hi Guys, I need to know, if there is an application that cannot natively implement MFA, is it possible to implement MFA Number Matching to the server/apps using DUO Cisco with absolutely no changes from the application side? for example the type of a...
VPN portal identity certificate change
Hello everyone, we are carrying out a job to renew the VPN portal identity certificate on an ASA computer. When making the change, the AnyConnect pop-up window appears with the following message: "Single sign-on AnyConnect token verification failure"...
Duo Auth proxy and ASA VPN locking user on Domain
Hello everybody,We have situation where there is user lockout policy on domain , after three bad password attempts. We have problem that users lock themselves after one missed duo push.ASA SSL vpn is configured to have 60 second timeout with 10 secon...
How to tell when a device is added using Splunk DUO API integration
Hello all, We are trying to narrow down when a device is added to a user account within Duo. We normally use the Duo PowerShell module(GitHub - mbegan/Duo-PSModule: Duo Admin API Powershell Wrapper Module) to pull a lot of random reports that are nee...
Duo Integration with ISE for TACACS+ Device Administration with AD Users
Hi guys, I need to know if is possible use DUO with ISE connected tu Azure AD to give access to our Network equipment using Tacacs+ i already test using duo with duo proxy+ise+ad on-premise, but now i need use ise with azure ad, the idea is not use a...
D284: Duo Release Notes for Feb 16, 2024
Hello everyone! Here are the release notes for our most recent updates to Duo. Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications f...
Do you manage the administration of Cisco products like Duo?
The Cisco Secure Design team wants to better understand how you and your team think about your organization's IT and security needs- especially how your team plans to achieve user protection. If you’d like to be considered for this research, please t...
Resolved! AD users authenticated without confirmation
I try to secure my Cloud Director infra with DUO.I already have the Authentication Proxy running and the AD group of the users is synced and visible in the DUO Admin portal.Within Cloud Director I have added the Authentication Proxy as an LDAP server...
id_token lifetime
"token" API call for Duo SSO Generic OIDC Relying Parties application returns "id_token" with a lifetime of 5 mins and "access_token" for 60 mins (configurable). Is there a way to configure lifetime for "id_token" as well?
Does DUO Security Support IPV6?
Hi, We are looking for a possible Multi-Factor from our current vendor since they do not support true IPV6. Does anyone know if DUO Security currently supports IPV6 or plans to in the upcoming future as part of their roadmap? Thanks, Kevin C
Any plans on Splunk Enterprise(OnPrem) using the universal prompt?
Created protect application / integration for our Splunk Enterprise (OnPrem), it does call back to the traditional prompt, I'm guessing it doesn't support the Universal Prompt yet? Our security department just wanted it setup internally so they can g...
Fortigate and RADIUS in Azure not connecting
We have a Fortigate and DC running Duo Auth Proxy service in Azure. Settting up the RADIUS in the fortigate, I can’t seem to get the Connection Status ‘green’. It keeps failing with Can’t contact RADIUS server. LDAP binding to the same server on ...
Office365 - VDI non-persistent (Instant Clones)
Hello, everyone, I have a question - we use Office365 and VMware View (Horizon) with instant clones. This means that a new W10 machine is created every time you log in and destroyed every time you log out. However, we have the problem that we have to...
