Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have a use case in our environment where some users need to be permanently deleted when their AD Sync’d groups are removed, rather than having them move to the “pending deletion” status for a period of time. We don’t have the Admin API set up curr...
One of the first systems we integrated with Duo is our Palo Alto GlobalProtect VPN. When we began enrolling individuals in the system, one of the first things we discovered was that users could get around the Duo prompt by using their email address ...
We’re beginning to get a Duo deployment for our IT department off the ground, with 2FA planned for our VPN and Citrix services first, with SSH and some web services coming shortly after.
Can anyone shed some light on best practices for user/group man...
Kristina,
Thanks for your reply. We will be using groups for several of the use-cases that you mention, including:
The default policy for an application lets unenrolled users bypass Duo, but you have a pilot group that you do want to enroll when acc...
