Skip to content

Duo

SaaS Management integrates directly with Duo, so you can view all user activity within the application. The integration gives you the usage data you need to make informed decisions on inactive licenses and any renewal or purchasing options.

Integrating with Duo

To connect Duo to SaaS Management, you must first create an API application within the Duo Admin panel. You’ll then use the credentials from the API application to complete the integration in SaaS Management.

Note

Before you integrate the applications, make sure you have signed out of your individual account within your organization and are signed in to the appropriate service account with the required permissions.

Registering an API Client

You must have the Owner role to create or modify an API application within the Duo Admin panel.

  1. Go to the Duo Admin panel.

  2. Select Applications > Protect Applications from the navigation menu.

  3. Enter admin_api in the search bar and select Protect beside the Admin API option.

  4. In the Details section, copy the information from the Integration key, Secret key, and API hostname fields. You’ll need this information when you connect Duo to SaaS Management.

  5. In the Settings section, enter a name for the Admin API application. For example, you can name the application "SaaS Management".

  6. Grant the Admin API application the following permissions:

    Permissions Description
    Grant read log The Admin API application can read authentication, offline access, telephony, and administrator action log information.
    Grant read resource The Admin API application can read resources such as users, phones, and hardware tokens.

  7. Select Save Changes to create the application.

You’ll now enter the credentials from the Admin API application into SaaS Management to complete the integration.

Connecting Duo to SaaS Management

  1. From the SaaS Management navigation menu, select Integrations.

  2. Select the Duo tile.

  3. Select Add Integration.

  4. In the Authenticate with Duo window, enter the following information:

    • Your Duo Integration Key - The Integration key from Duo.
    • Your Duo Integration Secret Key - The Secret key from Duo.
    • Your Duo API Host - The API hostname from Duo.

  5. Select Submit to complete the integration.

Your Duo usage data will start syncing immediately and should finish within 24 hours.

Required Permissions

Your account must have the Owner role to create or modify an API application within the Duo Admin panel.

User Metadata

SaaS Management pulls the following user metadata from Duo. You can filter your usage data by these fields:

Field Description
Groups The groups the user belongs to in Duo.
Status The user’s status in Duo. For example, a user’s status can be “Active”, “Disabled”, or “Locked out”.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://platform.sailpoint.com/discuss/tos.