Managing Users

This is just a heads up to anyone out there trying to do a directory sync with Google Workspace Secure LDAP… Related post: Google LDAP tips? We couldn’t get Duo talking directly to Google so we used an stunnel proxy to connect. However, now that we’...

Hello: I have an environment that the existing Private AD did not allow to have internet access. These Private AD was in the private segment. It have an Remote Desktop Server Farm that was under the Private AD. 1.) I have export the existing AD Accou...

Hi,When we add web applications to DUO either natively or via Generic SAML 2.0 it works fine and users can get self provisioned in these apps just by simply login in via our DUO Central page even if they've never used the application before.Their acc...

We sync users with our Microsoft AD to manage users in Duo. We have a few service accounts for which multiple user's phone or device are setup for that account. What happens to these devices when a user is removed via directory sync and this users de...

Has anyone successfully setup a way to monitor and get alerts generated to an email or ticketing system if a user is placed on bypass for an extended period of time? We are an MSP and our techs will commonly place users on Bypass, and many times they...

I can't seem to find any logs for User Lockout events. We get email notifications of the events, but they don't appear in any of the logs. I'd expect them to be in the Activity Logs, or Authentication logs.Does anyone know where to find these events?

Hello, I used to be able to see a log of my Azure directory sync that showed info on users getting added or removed.. but now I only see that when I run a sync directory with diagnostics... am I missing something?  The only regular logs I see are for...

Hi All,I have integrated my Ad server with Duo where only specific group users should get sync but all users outside of that particular getting sync. Base dn is like DC=abc,DC=local. Can you help me where i lacking. Attaching snapshot for your refere...

I have the 'Deny Access to Unenrolled Users' policy active for all users/groups.I have one user that needs ad-hoc special access without authenticating through DUO (3rd party contractor - not able to install/use an app). I have created a user account...

Hi all.There is a method with which an enrollment link is generated, it will expire after 30 days.And If an end user clicks an expired enrollment link, they will see a message stating: "This enrollment code has expired. Contact your administrator to ...

Dear All  I would like your support, I used Cisco DUO , integrate with Local Microsoft active directory, we have schedule to sync information every 8 Hrs.  but we found issue , when our user change password from their computer , but after 8 hrs pass,...

Hello all, We are moving to a new AD that our parent company has, new.com. We currently use directory sync with old.com. I understand that we have to remove old com and ensure that we have the same variables in new com so that new com AD will take ov...