Managing Users
Connect with other Duo members and pick up tips on how to create, edit, and manage Duo users.
434 PostsActivity in Duo Security
AADSTS50012531: Failed to process request from external authentication
After successfully authenticating and respoinding to the push and 'completing the 'Is this your device?' prompt the following error occurs:"AADSTS50012531: Failed to process request from external authentication provider due to unexpected request data...
Using Duo to prompt for MFA every day/week
Our Windows laptops connected to Azure Active Directory use 2FA but you are only prompted to use it when logging onto a new device. They do lock after 5 minutes idle requiring the PIN/fingerprint to be used. This process seems to fulfil the requireme...
Scripting DUO with PowerShell
I have a PS script that downloads the installer from "https://dl.duosecurity.com/duo-win-login-latest.exe" and sets $installerPath = "$env:TEMP\duo-win-login-latest.exe"I have tried 3 following different ways but each always gives a return code of 0,...
Duo MFA with iis website
Hello team I have a site configured on iis whose users authenticate via windows authentication via Active directory to connect to the application. However I want to add DUO for MFA, someone has already done this. I've looked at the duo documentation ...
D320 Duo Release Notes for August 1, 2025
Hello everyone! Here are the release notes for our most recent updates to Duo. Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out to commercial deployments. You can s...
D312 Duo Release Notes for April 11, 2025
Hello everyone! Here are the release notes for our most recent updates to Duo. Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out to commercial deployments. You can s...
Password cannot be changed at this time
Has anyone encountered this issue with Duo on Windows machines? We use the "Microsoft RDP" Application.We've noticed a recurring problem where users are prompted to change their password due to expiration, but receive the following error message:"The...
Recommendation for hardware token
Hello Community, can someone recommend me an hardware token? I mean some with the possibility to generate secret digit-codes on a display. Reason for it: We have an employee without a smartphone or any phone and we need to authenticate against a VMwa...
XPath to Email address?
I'm adding a new SAML app and on the application side it says, "Enter the XPath from themetadata payload where a users email is located". Where can I find this?
Resolved! Duo Bypass user if Duo servers are down
I'm currently looking at switching our RDP duo access to fail open to the more secure fail closed. My concern however is that we could be unable to access key servers if Duo was down.I created a breakglass user account and gave it the 'Bypass' status...
Resolved! Get-Content fails to recognize DUO installer as a valid executable
My PS7 script uses: $firstBytes = Get-Content $installerPath -Encoding ASCII -TotalCount 4 $magicHeader = $firstBytes -join ' 'if ($magicHeader -ne '77 90 144 0') {Write-Host "failed"; exit}I have also tried ASCII, UTF8 and Default for encodings, but...
Trying to overcome OpenVPN Reneg-Seconds
I've installed a Unifi Dream machine and used Duo as it's Radius, I use LDAP for primary auth and Duo Push as MFA. All is well...For an hour then OpenVPN forces it's hourly renegotiation and another push is sent out which must be approved. Not keen o...
Resolved! How to config Duo Authentication Proxy support 2 API ikey and skey
Hello: Due to the network security, the existing environment didn't have internet access and we are using Duo Authentication Proxy. However, we have 2 API with the same API Host. May I know how can I config Duo Authentication Proxy to have 2 API skey...
Resolved! PC admin account with more than one user ?
We are new to this so probably a basic questionWe have Admin accounts on PC's all called administrator but we want multiple engineers to have the ability to log into those for admin purposes. What's a good way to achieve this. We don't really want un...
Stepped up authentication
We are still in process of rolling out Duo in our environment and only have a small number of users enrolled with no login MFA yet. A lot of these users are getting stepped up authentications because of "risky" logins. The users are unaware they have...
