Managing Users

Hi, I have enrolled several users but they are configured for failopen on the devices, so when offline they are able to bypass Duo. If I now enable offline authentication and enrollment in the ‘windows RDP’ application, will this affect them in any w...

We have logically separate offices in our Active Directory such as Office1 and Office2. For phasing in Duo we would like to enable enrollments based on Active Directory sync using “Office1 Users” security group and “Office2 Users” security group. The...

I’m successfully using the directory sync feature to enroll my users in Duo. The problem I have is that there are disabled user accounts in the groups I’m syncing, and Duo is importing them and placing them in “inactive” status. This wouldn’t be a pr...

I just deployed Duo a week ago and have yet to been granted access to the support portal for a paid account under the MFA tier. I am working with support through email, but am wondering if the issues I’m having are due to my owner account being an em...

Recently, I ran into an issue where the NameID needed to be [email protected] and surprised to find out that DUO DAG didn’t offer this from the GUI. Raised a feature request. In the meantime, I figured out a way to achieve this and thought of...

I have tried to search in the DUO Authentication Proxy configuration docs to get a list of values that can be used with the parameter “username_attribute”. I wanted to understand if with can use the LDAP EMAIL address field for this and not the stand...

We have set up Trusted endpoint using the DUO Cert proxy, everything is pushed out/updated via a GPO when the user logs in. Everything is working OK up until we had someone have a name change, the change in AD went well, we had to sync with DUO 2 tim...

I think I posted in an inactive forum, I couldnt get an answer to my question. We sometimes have to set users on bypass to let them into an rdp session when the user forgets their smartphone, gets a new phone or is logging in from an airplane. It wou...

Hi, I need clarification on connecting Duo using Alias Name. Here is the scenario that I have. User is created and he is able to connect Duo successfully using programe. However, I would like to login using my email id too. So, I configured email id ...

Let’s say we have to use Radius or another option that does not permit inline device/user enrollment. Is there a way to indirectly enroll users that does not involve sending them to duo.com? Does the authproxy have a static web page that can be acces...