p0ur0 (p0ur0) asked a question.
dousecurity account unlocks
Could duo security accounts be unlocked by authenticated users through Okta?
- JP Manansala (Okta, Inc.)Hi Alex, Thanks for posting you inquiry in Okta Community. As per Okta KB: "Okta denies access to any user including Okta administrators that have a valid Duo user account and the user has a status of Disabled or Locked Out. Users cannot sign in with a different MFA factor when their Duo account has a Disabled or Locked Out status. Okta Technical Support cannot reset Duo devices for your Okta administrators or any Duo users. This must be performed by a Duo administrator. Make sure that you have multiple Duo administrators and your Okta administrators have multiple devices registered." https://support.okta.com/help/articles/Knowledge_Article/65540238-Configuring-Duo-Security Please let me know if you need any additional information. Thank you. Best, JPExpand Post
- JP Manansala (Okta, Inc.)Hi Alex, Thanks for posting you inquiry in Okta Community. As per Okta KB: "Okta denies access to any user including Okta administrators that have a valid Duo user account and the user has a status of Disabled or Locked Out. Users cannot sign in with a different MFA factor when their Duo account has a Disabled or Locked Out status. Okta Technical Support cannot reset Duo devices for your Okta administrators or any Duo users. This must be performed by a Duo administrator. Make sure that you have multiple Duo administrators and your Okta administrators have multiple devices registered." https://support.okta.com/help/articles/Knowledge_Article/65540238-Configuring-Duo-Security Please let me know if you need any additional information. Thank you. Best, JPExpand Post
- p0ur0 (p0ur0)Would it be possible to leverage Duo-Security Admin API call for user authentication against duosecurity with "Retrieve Users" command (https://duo.com/docs/adminapi#retrieve-users) ?Example response:"stat": "OK", "response": [{ "user_id": "DU3RP9I2WOC59VZX672N", "username": "jsmith", "realname": "Joe Smith", "email": "jsmith@example.com", "status": "active",If "status" response is “locked out”, then redirect the user to identity verfication page within Okta portal?Duo Support 1-855-386-2884Duo Support ticket 00114661Expand Post
This question is closed.
