Duo Security Custom API POST Actions Fail with "4XX - Invalid request parameters"
Oct 22, 2025
Workflows
Okta Classic Engine
Okta Identity Engine
Overview
Cisco Duo Admin API POST commands have the following requirements:
Send parameters for POST requests in the body as URL-encoded key-value pairs (the same request format used by browsers to submit form data). The header "Content-Type: application/x-www-form-urlencoded" must also be present.
Support has found that in some situations, the body needs to be in JSON format while passing the URL Encoded Content Type above to receive a successful return.
Applies To
- Okta Workflows
- Duo Security Connector
Solution
The following example outlines the formatting specified above when modifying a Cisco Duo user:
