Managing Users

Hi, a client ask me a solution for a SelfService Portal for Active Directory Password Reset. I’ve answer that there are some application for this and that the Duo Solution is great Addon for this type of security portal. I’ve bluffed hoping that Duo ...

In the admin console, it would be nice to see a (heat) map of where our users are authenticating from based on the data in the “second factor” log field. would be nice to select per application as well

Hi There, I am consultant with multiple project with different company, I have duo set up for one company A, then my second client (company B), also use Duo, I am using my cell number for company A, also plan to use the same cell for Company B. Is th...

All, Greetings. Curious to know if anyone is experiencing issues after logging into their respective admin portals for managing their Duo instances? This morning I have been logged out of our admin portal whilst navigating through it almost immediate...

Hi, In the Two-factor authentication implementation of Duo with Web-SDK, we do the primary authentication of Duo with Duo user’s username using “sign_request(ikey, skey, akey, username)”. Here, my requirement is, instead of username, I want to authen...

We have a use case in our environment where some users need to be permanently deleted when their AD Sync’d groups are removed, rather than having them move to the “pending deletion” status for a period of time. We don’t have the Admin API set up curr...

Hi, I have enrolled several users but they are configured for failopen on the devices, so when offline they are able to bypass Duo. If I now enable offline authentication and enrollment in the ‘windows RDP’ application, will this affect them in any w...

We have logically separate offices in our Active Directory such as Office1 and Office2. For phasing in Duo we would like to enable enrollments based on Active Directory sync using “Office1 Users” security group and “Office2 Users” security group. The...

I’m successfully using the directory sync feature to enroll my users in Duo. The problem I have is that there are disabled user accounts in the groups I’m syncing, and Duo is importing them and placing them in “inactive” status. This wouldn’t be a pr...

I just deployed Duo a week ago and have yet to been granted access to the support portal for a paid account under the MFA tier. I am working with support through email, but am wondering if the issues I’m having are due to my owner account being an em...

Recently, I ran into an issue where the NameID needed to be sAMAccountName@domain.org and surprised to find out that DUO DAG didn’t offer this from the GUI. Raised a feature request. In the meantime, I figured out a way to achieve this and thought of...

I have tried to search in the DUO Authentication Proxy configuration docs to get a list of values that can be used with the parameter “username_attribute”. I wanted to understand if with can use the LDAP EMAIL address field for this and not the stand...