Hi,I would like to clarify the license counts on Windows Logon and RDP. In the document, it mentioned all interactive users will be enrolled in Duo admin page. But in our environment, we wants to enable 2FA for Windows Domain Admin only. Do we need t...
Does Duo support user “run-as” and RSAT commands in AD with elevated rights? If so, are there instructions on how to set this up. I am looking to support Active Directory Administrators with MFA for when they use administrative tools with their Serv...
Hello, Is it possible to configure duo MFA with ISE using its internal users for authentication, not using external sources like AD ?
Hi,Is it possible to disable the rights for a group of Duo administrators to generate bypass codes or set the bypass authentication method?Thanks
Hi,I've setup a OpenLDAP sync using the proxy service. Connection is working and the list of groups are showing in the drop down list. However, when I select sync, no users are imported (1 error; see Administrator Actions report.) as per the snip bel...
Hello, I am from a performance test team, where our tests need to run for hours, atleast 10-12 hours without interupption to generate a scalable tests. But as the duo-sso session expires in 60 mins, the tests fails..In such cases, somebody has to sea...
This is just a heads up to anyone out there trying to do a directory sync with Google Workspace Secure LDAP… Related post: Google LDAP tips? We couldn’t get Duo talking directly to Google so we used an stunnel proxy to connect. However, now that we’...
I recently had to get a new cell phone and since then I have not been able to get DUO Push notifications when logging into the DUO portal. I get them when I login to the computer and email just not when logging into the portal.
Hello: I have an environment that the existing Private AD did not allow to have internet access. These Private AD was in the private segment. It have an Remote Desktop Server Farm that was under the Private AD. 1.) I have export the existing AD Accou...
Hi,When we add web applications to DUO either natively or via Generic SAML 2.0 it works fine and users can get self provisioned in these apps just by simply login in via our DUO Central page even if they've never used the application before.Their acc...
Hello folks! I’m totally new to Duo, but I’ve been working as an IT pro for quite a while now. Our organization is exploring the idea of implementing Duo MFA to domain-joined Windows Servers. I’ve managed to set up a basic environment to initially te...
We sync users with our Microsoft AD to manage users in Duo. We have a few service accounts for which multiple user's phone or device are setup for that account. What happens to these devices when a user is removed via directory sync and this users de...
Has anyone successfully setup a way to monitor and get alerts generated to an email or ticketing system if a user is placed on bypass for an extended period of time? We are an MSP and our techs will commonly place users on Bypass, and many times they...
I can't seem to find any logs for User Lockout events. We get email notifications of the events, but they don't appear in any of the logs. I'd expect them to be in the Activity Logs, or Authentication logs.Does anyone know where to find these events?
Hello Cisco CommunityI am DUO admin myself but it is my supervisor who created my account as a DUO Admin.Now he is gone on vacation (for a week) and I have the responsability to add new colleague.in our team.But I dont know how to create this new adm...
