Duo Security integration overview
Connect Viio with your Duo Security tenant to pull user‑, device‑ and MFA‑activity data into your SaaS Intelligence dashboard. The sync is read‑only and takes just a few minutes to set up.
Capabilities
Capability | What it means in Viio |
✅ Users | Lists every Duo‑enrolled user and their status (active, locked, etc.). |
✅ Saas Discovery | Discovers Saas apps that are used by your employees. |
✅ Licences | Compares paid Duo licences with real usage to spot waste. |
Prerequisites
Before you start you need:
Owner or Administrator role in the Duo Admin Panel.
Ability to create an Admin API application.
Generate Duo Admin API credentials
Sign in to the Duo Admin Panel ↗️.
Go to Applications → Application Catalog.
Search for Admin API and click Protect.
Note the Integration key, Secret key and API hostname.
Under Permissions, enable:
Grant read information
Grant read log
Grant read resource
Grant write resource (required by Duo to list devices)
Setup
In Viio → Integrations, select Duo Security.
Enter the API hostname, Integration key and Secret key you copied earlier.
Click Validate. Viio checks the credentials and required scopes.
Give the connection a clear name (e.g. “Acme – Duo Security”) and click Save.
The first sync starts instantly. Allow up to 30 minutes for data to appear.
Troubleshooting & FAQ
Issue | Quick fix |
“401 Unauthorised” error | Double‑check that the Secret key is correct and the system time on your Viio connector is accurate (Duo requires request‑time within 5 min). |
No data after one hour | Confirm the Admin API application still has the four permissions above. Removing read log will stop usage data. |
Need more granular logs | Viio pulls the last 180 days of Duo authentication events. Export to SIEM via Duo Log Sync if you need longer retention. |
Technical details
Auth method: Duo Admin API HMAC‑signed REST calls.
Primary endpoints:
GET /admin/v1/users
– user objectsGET /admin/v1/authentication_logs
– MFA eventsGET /admin/v1/phones
,GET /admin/v1/tokens
– device inventory(duo.com)
Rate limit: 1 000 requests / 5 mins (enforced by Duo).
Data flow: One‑way, read‑only from Duo Security → Viio. Viio never writes to Duo.