Cisco Duo - Admin
  • 02 May 2023
  • 2 Minutes to read
  • Dark
    Light
  • PDF

Cisco Duo - Admin

  • Dark
    Light
  • PDF

Article summary

This guide will teach you how to set up the connector between Duo Admin and Clarity Security.
Estimated time to complete: 5 minutes
If you run into any problems, please contact your support team or support@claritysecurity.io.

Supported Connector Capabilties

Below are the capabilities supported by the connector at this time.

MethodSupported
Provision UserYes
List GroupsYes
Modify Users' GroupsYes
Remove Users' GroupsYes
Disable Users' Access to DuoYes
Delete UserYes

Before You Start

Differences between Cisco Duo Admin and Cisco Duo User

Duo administrator accounts are managed separately from Duo users. A Duo user is an object that represents a user of the applications and services you protect with Duo. A Duo admin manages the Duo user accounts and various other administrative functions, as seen below in the screenshot.
image.png

Clarity Duo User and Admin Connector Information

The configuration steps between Duo User and Duo Admin are identical, they are two separate connectors in Clarity due to major differences in provisioning and deprovisioning API methods.

How to Setup the Connector

Step 1: Log into the Duo Console at https://admin.duosecurity.com/

Step 2: Click Applications

image.png

Step 3: Click Protect an Application

image.png

Step 4: Search for Admin API then click Protect.

image.png

Step 5: Copy the Integration Key, Secret Key, and API hostname and continue scrolling to the section Permission.

image.png

Step 6: Under Permissions add Grant administrators, Grant read resource, and Grant write resource > scroll to Save Changes.

Step 7: Log into your Clarity Security Portal

Step 8: Click On Applications. Select Marketplace. Then search for Duo Admin and click connect.

image.png

Step 9: Configure the connection.

Copy your hostname, integration_key, and secret_key from Duo into the matching fields in Clarity.

image.png

Step 10: Configure the additional Application Settings.

Complete the App Settings form. Details for each field can be found at the following article: Common App Configuration Steps

image.png

Step 11: User Settings

Complete the User Settings form, check the table at the top to see if any features are unsupported. Details for each field can be found at the following article: Common App Configuration Steps

image.png

Step 12: Validate Your Selections and Save

Save

Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing). This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes.

Need help?

If you have any problems, contact your customer success team. You can also get in touch with our general support via email, open a support ticket. Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.


Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.