When the user account is logged out it works fine. Is there a way to set up it so it enforces 2FA authentication after the machine goes to sleep or locked?
Forum Posts
Hello all,I have an issue where if I have my user on this specific OU, Duo sso somehow doesn't see that OU, though on the portal it supposed to sync users on a sec group called duousers, but when I read the authproxy.log, it shows that its looking at...
Hello,I need to replace the mobile phone currently used for Cisco Duo MFA authentication on my Cisco account.I reviewed Cisco document ID 220594, but the documented procedure requires opening a case associated with a Security Cloud Sign-On contract, ...
Hello, We have a group of users that work in a 24 hour call center type environment. We are trying to setup a custom admin role that allows supervisors in that area to unlock Duo users who have locked themselves out. Is there any way to limit that ro...
Hi,We recently updated workstations from v4 to v5 and before updates were applied, a user would receive a push on their cell phones but now DUO prompting for PIN #. Also, the authentication screen had a box to "remember me for 12 hours" and that box...
Hello Community,When I go to:Users -> Users - No user exist.Users -> Administrators -> Administrators -> Add Administrator - It states the provided email address is already in use by another admin. How to remove hidden admin object?Regards,AK
Hello, I am currently testing Duo passwordless and my password expired last week. In the past, as long as we were connected to our VPN while changing the password, everything synced up from local Windows to Active Directory with no issues. Today, I d...
Resolved! Nested AD Groups
Can Duo read users associated to nested AD groups in a parent AD group when the parent AD group is being synced into the Duo system to grant access to an application on the Duo Central dashboard?
Found an interesting one today. During offline enrollment setup with a Yubikey, if you hold the gold circle too long or maybe tap a 3rd time instead of the 2 required times, it presses the back button on the screen instead of the activate offline log...
Resolved! New interface - Exports not working
Seems we have a new interface change on the admin panel for managing users now. Previously, I could select by one of the top menus, not enrolled, bypass, locked out, inactive and then export them by that status. (to CSV)That no longer works. It now g...
Resolved! Adding Entra ID vs. Existing Local Users
We have a Duo deployment with only local (Duo) users defined via manual import. Now we would like to add a connection to our Entra ID directory to use moving forward with more applications becoming Duo-enabled. What happens to those local users who a...
Hello. Is there a native report in DUO that will display which users accounts are set to ‘Bypass’ and send this list through email on a regular basis? Regards, Leo
Hello,i am using DUO free edition for total of 4 users logon via RDP on 4 windows machines, each user on single RDP. Recently on one of the machines the user was stopped to be asked for DUO push confirmations on DUO mobile app. I removed and isntalle...
It would be great if we can get a flag to select on specific user accounts to prevent the trash process from deleting specific accounts. These are typically domain admin accounts for servers that have hardware tokens or offline codes assigned, but a...
In our environment we use Active Directory to import users into Duo. We use the login MFA application to provide MFA to our Windows devices. When new employees start, our plan was to create a one time bypass code for their account so they can get in...