Policy & Access Control

What is best practice for setting up local admin accounts with duo - without adding a bypass code, or adding all the techs cell as an authentication method? I don't want every tech to get a notification each time one tech logs into a local admin. I k...

Good Morning, My district is fairly new to DUO. We are rolling this out to the whole district, and we are encountering some trust assessment problems. How do I resolve these issues. Most times, I am standing in front of the user when this happens.Unr...

There's certain administration personnel that need to access our organization's Outlook fairly frequently. Is there a setting somewhere to lengthen the amount of time between prompts when they try to access Outlook offsite on their phones? Once a day...

The intuition is requiring 2FA for a slight increase of security. I'm looking to give users the ability to either use the encrypted app or to use another means like a code via SMS or a phone system that isnt encrypted. Is this possible to set up for ...

Are there any plans to extend the MFA APIs in a way that would make Passwordless auth possible outside of Duo SSO? (Yes, I know this will require careful integration to ensure security is maintained.) In my environment, AD auth (and using Duo’s SSO i...

Hello all,I am currently running into an issue if a laptop is connected to our enterprise network (directly - no VPN), end-users are able to us 2FA and connect no issue.  Now if the same user connects to the public WIFI they will go through DUO 2FA l...

I am trying to set up the authentication proxy to connect to an open ldap server. The authproxy_connectivity_tool is telling me that I’m not getting any search results because of my ldap filter. The meaning full section is… The Auth Proxy did not ...

Not sure if this is the right place to post this. I use Duo for a few things and one of them is Keeper for my passwords. The push works fine but about two months ago it stopped allowing me to use SMS when the push wouldn’t go through. I hit the SM...

I have just joined a new organization where the trust remembered devices setting is configured for 180 days and would like to change that to a shorter value. If I make this change, will any end user who has enabled that setting in their browser need...

Is there a way to send a push to all devices using DUO to test for 2FA Fatigue? Currently we DUO setup with just the green checkmark for authentication and I would like to see if people would simply click it out of habit. It would be a great test to ...

I’m loving the introduction of the Duo Verified push and the ability to integrate it with risky login policies! The 2x areas that I haven’t been able to implement Verified Push is on the Duo Admin page as well as on the Microsoft Workstation (RDP) lo...