Skip to main content

Duo Security Integration

Setup your Duo integration effortlessly and get valuable usage insights

M
Written by Marta Droneva
Updated yesterday

Duo Security integration overview

Connect Viio with your Duo Security tenant to pull user‑, device‑ and MFA‑activity data into your SaaS Intelligence dashboard. The sync is read‑only and takes just a few minutes to set up.

Capabilities

Capability

What it means in Viio

✅ Users

Lists every Duo‑enrolled user and their status (active, locked, etc.).

✅ Saas Discovery

Discovers Saas apps that are used by your employees.

✅ Licences

Compares paid Duo licences with real usage to spot waste.

Prerequisites

Before you start you need:

  • Owner or Administrator role in the Duo Admin Panel.

  • Ability to create an Admin API application.

Generate Duo Admin API credentials

  1. Sign in to the Duo Admin Panel ↗️.

  2. Go to Applications → Application Catalog.

  3. Search for Admin API and click Protect.

  4. Note the Integration key, Secret key and API hostname.

  5. Under Permissions, enable:

    • Grant read information

    • Grant read log

    • Grant read resource

    • Grant write resource (required by Duo to list devices)

Setup

  1. In Viio → Integrations, select Duo Security.

  2. Enter the API hostname, Integration key and Secret key you copied earlier.

  3. Click Validate. Viio checks the credentials and required scopes.

  4. Give the connection a clear name (e.g. “Acme – Duo Security”) and click Save.

  5. The first sync starts instantly. Allow up to 30 minutes for data to appear.

Troubleshooting & FAQ

Issue

Quick fix

“401 Unauthorised” error

Double‑check that the Secret key is correct and the system time on your Viio connector is accurate (Duo requires request‑time within 5 min).

No data after one hour

Confirm the Admin API application still has the four permissions above. Removing read log will stop usage data.

Need more granular logs

Viio pulls the last 180 days of Duo authentication events. Export to SIEM via Duo Log Sync if you need longer retention.

Technical details

  • Auth method: Duo Admin API HMAC‑signed REST calls.

  • Primary endpoints:

    • GET /admin/v1/users – user objects

    • GET /admin/v1/authentication_logs – MFA events

    • GET /admin/v1/phones, GET /admin/v1/tokens – device inventory(duo.com)

  • Rate limit: 1 000 requests / 5 mins (enforced by Duo).

  • Data flow: One‑way, read‑only from Duo Security → Viio. Viio never writes to Duo.

Additional resources

Did this answer your question?