Hello Community,When I go to:Users -> Users - No user exist.Users -> Administrators -> Administrators -> Add Administrator - It states the provided email address is already in use by another admin. How to remove hidden admin object?Regards,AK
Forum Posts
Hello, I am currently testing Duo passwordless and my password expired last week. In the past, as long as we were connected to our VPN while changing the password, everything synced up from local Windows to Active Directory with no issues. Today, I d...
Resolved! Nested AD Groups
Can Duo read users associated to nested AD groups in a parent AD group when the parent AD group is being synced into the Duo system to grant access to an application on the Duo Central dashboard?
Found an interesting one today. During offline enrollment setup with a Yubikey, if you hold the gold circle too long or maybe tap a 3rd time instead of the 2 required times, it presses the back button on the screen instead of the activate offline log...
Resolved! New interface - Exports not working
Seems we have a new interface change on the admin panel for managing users now. Previously, I could select by one of the top menus, not enrolled, bypass, locked out, inactive and then export them by that status. (to CSV)That no longer works. It now g...
Resolved! Adding Entra ID vs. Existing Local Users
We have a Duo deployment with only local (Duo) users defined via manual import. Now we would like to add a connection to our Entra ID directory to use moving forward with more applications becoming Duo-enabled. What happens to those local users who a...
Hello. Is there a native report in DUO that will display which users accounts are set to ‘Bypass’ and send this list through email on a regular basis? Regards, Leo
Hello,i am using DUO free edition for total of 4 users logon via RDP on 4 windows machines, each user on single RDP. Recently on one of the machines the user was stopped to be asked for DUO push confirmations on DUO mobile app. I removed and isntalle...
It would be great if we can get a flag to select on specific user accounts to prevent the trash process from deleting specific accounts. These are typically domain admin accounts for servers that have hardware tokens or offline codes assigned, but a...
In our environment we use Active Directory to import users into Duo. We use the login MFA application to provide MFA to our Windows devices. When new employees start, our plan was to create a one time bypass code for their account so they can get in...
Resolved! Multiple emails for single user
Hello, I am setting up a Duo environment for our users. All of our users have 2 email addresses, formatted as follows: username@123.com and username@abc.com. Our on-prem Exchange is set up to give every account both emails as an alias for the same ac...
Resolved! DUO - allow logon locally
Hi, We are using DUO Wondows logon 3.1.1 to enable MFA for our Jump servers. Is it necessary that, users who need to authenticate to those Jump servers should be under the GPO policy “Allow logon locally”. we have around 500 users who need access to ...
Does anyone know if there is a way to challenge a user for MFA say once per day instead of every time we log in? I know you can on Windows with remember devices, but I am hoping there is some way to config this with Duo Unix also. Thanks!
When the user account is logged out it works fine. Is there a way to set up it so it enforces 2FA authentication after the machine goes to sleep or locked?
Hello, Im currently deploying Duo into my environment. We are using it as MFA for RA VPN that is running on FTD. I am wondering if there is a possible bypass for disaster recovery if for example a authentication proxy that is running on our ESXi env...