- 02 May 2023
- 2 Minutes to read
- Print
- DarkLight
- PDF
Cisco Duo - User
- Updated on 02 May 2023
- 2 Minutes to read
- Print
- DarkLight
- PDF
This guide will teach you how to set up the connector between Duo User and Clarity Security.
Estimated time to complete: 5 minutes
If you run into any problems, please contact your support team or support@claritysecurity.io.
Supported Connector Capabilties
Below are the capabilities supported by the connector at this time.
Method | Supported |
---|---|
Provision Users | Yes |
List Groups | Yes |
Modify Users' Groups | Yes |
Remove Users' Groups | Yes |
Disable Users' Access to Duo | Yes |
Delete User | Yes |
Before You Start
Differences between Cisco Duo Admin and Cisco Duo User
Duo administrator accounts are managed separately from Duo users. A Duo user is an object that represents a user of the applications and services you protect with Duo. A Duo admin manages the Duo user accounts and various other administrative functions, as seen below in the screenshot.
The configuration steps between Duo User and Duo Admin are identical, they are two separate connectors in Clarity due to major differences in provisioning and deprovisioning API methods.
How to Setup the Connector
Step 1: Log into the Duo Console at https://admin.duosecurity.com/
Step 2: Click Applications
Step 3: Click Protect an Application
Step 4: Search for Admin API then click Protect.
Step 5: Copy the Integration Key, Secret Key, and API hostname and continue scrolling to the section Permission.
Step 6: Under Permissions add Grant administrators, Grant read resource, and Grant write resource > scroll to Save Changes.
Step 7: Log into your Clarity Security Portal
Step 8: Click On Applications. Select Marketplace. Then search for Duo User and click connect.
Step 9: Configure the connection.
Copy your hostname, integration_key, and secret_key from Duo into the matching fields in Clarity.
Step 10: Configure the additional Application Settings.
Complete the App Settings form. Details for each field can be found at the following article: Common App Configuration Steps
Step 11: User Settings
Complete the User Settings form, check the table at the top to see if any features are unsupported. Details for each field can be found at the following article: Common App Configuration Steps
Step 12: Validate Your Selections and Save
Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing). This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes.
Need help?
If you have any problems, contact your customer success team. You can also get in touch with our general support via email, open a support ticket. Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.