Skip to content

Integrating SailPoint with Duo

Connecting SailPoint to your Duo system allows you to manage the Duo user accounts. This guide is designed to give specific information about the requirements and field definitions needed to getting a working instance of Duo.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Duo connector supports the following features.

Note

The Duo accounts include Duo users and Administrators. The Duo source supports Password Management for Duo administrators only. Before you can use any item marked with an asterisk (*), SailPoint must activate the feature for your site.

Account Management

Manages Duo Users and Administrators as accounts.

For Duo Users

  • Aggregation, Refresh Accounts
  • Create, Update, Delete
  • Enable, Disable, Unlock
  • Add/Remove Entitlement
  • Add/Remove Phone Attribute: phone_type and phone_platform

For Duo Administrators

  • Aggregation, Refresh Accounts
  • Enable, Disable

  • Create, Update, Delete

  • Change Password

  • Add/Remove Associated Administrative Units

Account - Group Management

  • Aggregation

    Note

    By default, the Duo Administrator with the Owner role is enabled.

  • Supports Administrative Unit as a group object. For more information, refer to Administrative Unit Group Attributes.

    Note

    You need to manually add the Administrative Unit as a group object to utilize it.

For more information on features, refer to Source Features.

Prerequisites

  • Create an Admin API integration. This generates an Integration Key and Secret Key that is required for Duo configuration. For more information, refer to Connection Settings.

  • Configure at least one virtual appliance cluster and successfully test the connection. For instructions, refer to the Virtual Appliance Reference Guide.

Required Permissions

Sign in as an administrator user to the Duo Administrator Panel. Ensure that the administrator creating the new Administrator API integration has the following permissions:

When Manage Administrator Users is enabled:

  • Grant Administrators
  • Grant Read Resource
  • Grant Write Resource

When Manage Administrator Users is not enabled:

  • Grant Read Resource
  • Grant Write Resource

Note

For read only operations, the Grant Write Resource permission is not required.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.