Setup your Duo integration and get all the insights in Torii's dashboard

Usage

Torii integrates with Duo and syncs the list of users, their last logged-in time, and their Duo status (Active, Bypass, or Disabled).

Note: Administrator roles are synced only for accounts that include the Administrative Roles feature.

Setup

Note that only administrators with the Owner role can create or modify an Admin API application in the Duo Admin Panel.

To connect Duo to Torii, follow these steps:

1. Sign up for a Duo account.
2. Log in to the Duo Admin Panel and navigate to Applications.
3. Click Protect an Application and locate the entry for Admin API in the applications list. Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname.
   Enable the permissions as listed in the screenshot below.
4. Navigate to Torii Integrations page, search for Duo and click on its tile in order to connect.
5. Paste the integration key, secret key, and API hostname you generated in the steps above and click Connect.

Permissions

Read-only Permissions

The following permissions are required when connecting the Duo integration in Read-only mode:

Note: If you wish for Torii to read the Duo account name, the "Grant settings" permission is required.
In case Torii doesn't have these permissions, we will generate a default name which can later be changed manually.

Actions

Create Duo user

• Creates a new user in Duo with the username, full name, email and status (Active, Bypass or Disabled) you choose.

Delete Duo user

• Deletes the user from Duo.
• Users synced to Duo from a directory (Directory Sync) can only be deleted in the source directory.

Change Duo user status

• Changes the user's status in Duo to Active, Bypass or Disabled.

Add Duo user to groups

• Adds the user to one or more Duo groups.

Remove Duo user from groups

• Removes the user from the selected Duo groups, or from all groups.

Delete Duo user phones

• Removes the user's phones from Duo, so they can no longer be used to approve sign-ins.
• A phone that belongs only to this user is deleted. A phone that is also assigned to other users is only removed from this user, so the other users can keep using it.

All actions require the Read-write permissions listed above.

For any further questions, please contact Torii Support.