SaaS Management integrates directly with Duo, so you can view all user activity within the application. The integration gives you the usage data you need to make informed decisions on inactive licenses and any renewal or purchasing options.
Integrating with Duo
To connect Duo to SaaS Management, you must first create an API application within the Duo Admin panel. You’ll then use the credentials from the API application to complete the integration in SaaS Management.
Before you integrate the applications, make sure you have signed out of your individual account within your organization and are signed in to the appropriate service account with the required permissions.
Registering an API Client
You must have the Owner role to create or modify an API application within the Duo Admin panel.
Go to the Duo Admin panel.
Select Applications > Protect Applications from the navigation menu.
admin_apiin the search bar and select Protect beside the Admin API option.
In the Details section, copy the information from the Integration key, Secret key, and API hostname fields. You’ll need this information when you connect Duo to SaaS Management.
In the Settings section, enter a name for the Admin API application. For example, you can name the application "SaaS Management".
Grant the Admin API application the following permissions:
Permissions Description Grant read log The Admin API application can read authentication, offline access, telephony, and administrator action log information. Grant read resource The Admin API application can read resources such as users, phones, and hardware tokens.
Select Save Changes to create the application.
You’ll now enter the credentials from the Admin API application into SaaS Management to complete the integration.
Connecting Duo to SaaS Management
From the SaaS Management navigation menu, select Integrations.
Select the Duo tile.
Select Add Integration.
In the Authenticate with Duo window, enter the following information:
- Your Duo Integration Key - The Integration key from Duo.
- Your Duo Integration Secret Key - The Secret key from Duo.
- Your Duo API Host - The API hostname from Duo.
Select Submit to complete the integration.
Your Duo usage data will start syncing immediately and should finish within 24 hours.
Your account must have the Owner role to create or modify an API application within the Duo Admin panel.
SaaS Management pulls the following user metadata from Duo. You can filter your usage data by these fields:
|Groups||The groups the user belongs to in Duo.|
|Status||The user’s status in Duo. For example, a user’s status can be “Active”, “Disabled”, or “Locked out”.|