dousecurity account unlocks Skip to main content
https://support.okta.com/help/answers?id=906f0000000i0nwia0&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Alex ShchukinAlex Shchukin 

dousecurity account unlocks

Could duo security accounts be unlocked by authenticated users through Okta?
Best Answer chosen by Niki (Okta, Inc.) 
Jaypee ManansalaJaypee Manansala (Okta)
Hi Alex,

Thanks for posting you inquiry in Okta Community.

As per Okta KB: "Okta denies access to any user including Okta administrators that have a valid Duo user account and the user has a status of Disabled or Locked Out. Users cannot sign in with a different MFA factor when their Duo account has a Disabled or Locked Out status. Okta Technical Support cannot reset Duo devices for your Okta administrators or any Duo users. This must be performed by a Duo administrator. Make sure that you have multiple Duo administrators and your Okta administrators have multiple devices registered."

https://support.okta.com/help/articles/Knowledge_Article/65540238-Configuring-Duo-Security

Please let me know if you need any additional information. Thank you.

Best,

JP

All Answers

Jaypee ManansalaJaypee Manansala (Okta)
Hi Alex,

Thanks for posting you inquiry in Okta Community.

As per Okta KB: "Okta denies access to any user including Okta administrators that have a valid Duo user account and the user has a status of Disabled or Locked Out. Users cannot sign in with a different MFA factor when their Duo account has a Disabled or Locked Out status. Okta Technical Support cannot reset Duo devices for your Okta administrators or any Duo users. This must be performed by a Duo administrator. Make sure that you have multiple Duo administrators and your Okta administrators have multiple devices registered."

https://support.okta.com/help/articles/Knowledge_Article/65540238-Configuring-Duo-Security

Please let me know if you need any additional information. Thank you.

Best,

JP
This was selected as the best answer
Alex ShchukinAlex Shchukin
Would it be possible to leverage Duo-Security Admin API call for user authentication against duosecurity with "Retrieve Users" command (https://duo.com/docs/adminapi#retrieve-users) ?
Example response:
"stat": "OK", "response": [{ "user_id": "DU3RP9I2WOC59VZX672N", "username": "jsmith", "realname": "Joe Smith", "email": "jsmith@example.com", "status": "active",
If "status" response is “locked out”
, then redirect the user to identity verfication page within Okta portal?
Duo Support 1-855-386-2884
Duo Support ticket 00114661