Policy & Access Control

Duo helps you reduce risks by setting and enforcing policies and app access. Visit the forum for Q-and-A on access policies.

Hello, When using Duo, Firefox ESR is incorrectly flagged as significantly outdated. Even if it is on the absolute latest ESR release, which it almost always is, Duo flags is as outdated during the login process. Please stop flagging up-to-date and...

Hello, We support quite a few laptops which are installed in public safety vehicles. Since these devices are shared by numerous officers we’d like to prevent the automatic enrollment prompt for offline access while enforcing this requirement for all ...

Rather than having a list of IPs and CIDRs, it would be good to have a grid like list of entries where we can add a description of what each trusted network is. For example I want to give trusted network status to our network support partner and our ...

Dear Duo, Is there any way to PREVENT certain phone numbers and IPs from signing up for MFA (using the inline prompt or the self-service site) with an account? In addition, is there anyway to LIMIT signing up for MFA to a certain IP range? Thanks, Th...

Has anyone come across an issue when using DUO and One Drive for Mac when you try to select Remember me for 30 days you get an error that says “You need to enable cookies in order to remember this device.” Where do you enable the cookies?

Does Duo support the use of the Firefox ESR releases? ESR: Extended Support Release – like a “Long Term Release”, it’s officially supported and distributed by Mozilla. The current one (60.7.1esr) is being flagged by Duo Web as being old, but was rele...

In a policy where we have Duo checking version numbers of Operating Systems, and we’ve chosen ones that are “Dynamically updated by Duo”, is there a knowledge base article or such that lists the current version numbers? (Same would apply to current v...

Hello, We currently have the DAG configured in our environment for Office 365. We have frequent issues where a users account will randomly lockout without reason but then a while later stop. When I check out AD logs I’m showing the lockout is caused ...

Hello All we currently use Duo with VPN and it does the push option (where you have to approve or deny) however Duo will no longer support iOS10 or Android 6 or below phones with the push option. How can I change those phones only to use the call o...

I’m running ADFS 4 on Server 2016. Every time I enable MFA on the M$ O365 relying party trust using an access control policy, I get calls from users who can’t use the native IOS and Android mail clients. I know there are some custom rules that DUO ...

Hello, I’ve implemented Duo with my Cisco ASA using SAML but am I correct in assuming that I can’t assign different group policies using the ASA? Would I be better off using a RADIUS server with Duo? Thanks for the help, Derrick

Hi Duo Security LDAP Two-Factor Authentication Using LDAP I used this method. Because In our case we use duo just on access from internal network to internal application using authentication pro...

Hello All, Our organization would like to set “remember me for 24 hours” option for all users by default. Is there an API call or global setting that we can set this up?