Either the main DUO administrator needs to give you access or you need to give the DUO administrator brief access so that they can run the authorization process that follows here. If you, as the Microsoft 365 administrator do not have access to the DUO administration console you can work with the DUO administrator to get the information you need. If you are protecting others such as Microsoft RDP (next article) you will find this on the list as well. Select the Microsoft Azure Active Directory option. Go to your DUO administration console and select Applications and then Protect an Application. Step one in the process is to get the configuration file from DUO that you need to enter into Microsoft 365.

This is part one of a two-part set showing firstly how to implement DUO on Microsoft 365, followed by a second guide to set up DUO on-premises so that application servers and even Microsoft servers can be made subject to DUO when using RDP to gain access to them. For details, see Adding Discovered SSO Enabled Applications to Your List of Managed SaaS Applications.As is normal with such things there are multiple guides to implement various technical solutions and often confusion can arise on what guide is right for you and which set of steps should be followed. Tip:After the Application Discovery integration task has been enabled after 24 hours, you can add the discovered SSO enabled applications to your list of Managed SaaS Applications. For details, see Adding an Application.Ĭopy and paste the following Duo Security information into SaaS Management:ĪPI Hostname of the Admin APIs’ API endpoints. To integrate Duo Security with SaaS Management: 1.Ĭomplete the prerequisite steps in Adding the Admin API Application in the Duo Admin Panel.Īdd the Duo Security application in SaaS Management. Proceed to Integrating Duo Security With SaaS Management.Ĭomplete the following steps to integrate Duo Security with SaaS Management. Grant read resource: permit this Admin API application to read resources such as users, phones, and hardware tokens. Grant read log: permit this Admin API application to read logs.

Grant applications: permit this Admin API application to add, modify, and delete applications.

You will need this information to complete the integration with SaaS Management.Įnable the following Admin API permissions: Sign in to the Duo Admin Panel and go to Applications.Ĭlick Protect an Application and locate the entry for Admin API in the applications list.Ĭlick Protect on the far-right of the page to configure the application.Ĭopy and paste your Integration Key, Secret Key, and API Hostname values into a file. To add the Admin API application in the Duo Admin panel: 1. New customers with an Access or Beyond trial account may contact Duo Support to request Admin API access. Note: This API is automatically available to paying Duo Beyond, Duo Access, and Duo MFA plan customers. You need to obtain the Integration Key, Secret Key, and API Hostname values from the Duo Admin Panel before Integrating Duo Security With SaaS Management. Īdding the Admin API Application in the Duo Admin PanelĪdministrators with the Owner role perform the following steps to add the Admin API application in the Duo Admin Panel.To integrate Duo Security with SaaS Management, perform the following tasks. For details, see the First Steps section of the Duo Admin API documentation. Therefore, both SSO Name and SSO Display Name are stored in SaaS Management.Īdministrator with the Owner role. Depending on the application, these two names may appear the same or different. The SSO Display Name is the display name of the application managed by the SSO provider. The information stored is subject to change as enhancements are made to the SaaS application.įor Single Sign-On (SSO) information, the SSO Name is the name of the application managed by the SSO provider. The following table describes the available integration tasks and stored data. Integrating Duo Security With SaaS Management Required Minimum Permissions for Duo Security The following sections provide prerequisites, resources, and instructions for integrating with SaaS Management. Duo Security is a cloud-hosted SAML Identity Provider (IdP) that adds two-factor authentication, complete with inline self-service enrollment and Duo Prompt, to popular cloud services like Salesforce and Amazon Web Services using SAML 2.0 federation.

Duo admin center