DuoAuth

Details

ID	`DuoAuth`
Provider	Cisco Systems
Category	Authentication & Identity Management
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

README

The Duo Auth API lets developers integrate with Duo Security’s platform at a low level.

Configure DuoAuth in Cortex

Parameter	Required
Trust any certificate (not secure)	False
Use system proxy settings	False
API Hostname	True
Integration Key	True
Secret Key	True

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

duoauth-push-notification

Send push message to Duo user.

Base Command

duoauth-push-notification

Input

Argument Name	Description	Required
username	Insert username.	Required
pushinfo	A set of URL-encoded key/value pairs with additional contextual information associated with this authentication attempt. The Duo Mobile app will display this information to the user. For example: from=login%20portal&domain=example.com, The URL-encoded string’s total length must be less than 20,000 bytes. Default is From=XSOAR&Confirm=Write%20your%20message%20here….	Optional
type	This string is displayed in the Duo Mobile app push notification and UI. Default is Activities.	Optional

Context Output

Path	Type	Description
DuoAuth.PushNotification.Status	String	Status of a Push message.
DuoAuth.PushNotification.Message	String	E.g. if approved, “Success. Logging you in…”.
DuoAuth.PushNotification.User	String	Username receiving Push message.

Configuration parameters

insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
api_hostname — API Hostname (required)
integration_key — (required)
secret_key — (required)

Commands (1)

duoauth-push-notification
Send push message to Duo user.

Source

DuoAuth.py DuoAuth.yml DuoAuth_description.md

Download History Raw

category: Authentication & Identity Management
provider: Cisco Systems
sectionorder:
- Connect
- Collect
commonfields:
  id: DuoAuth
  version: -1
configuration:
- display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
  section: Connect
- display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
- display: API Hostname
  name: api_hostname
  required: true
  type: 0
  section: Connect
- display: ''
  displaypassword: Integration Key
  hiddenusername: true
  name: integration_key
  required: true
  type: 9
  section: Connect
- display: ''
  displaypassword: Secret Key
  hiddenusername: true
  name: secret_key
  required: true
  type: 9
  section: Connect
description: The Duo Auth API lets developers integrate with Duo Security's platform at a low level.
display: DuoAuth
name: DuoAuth
script:
  commands:
  - arguments:
    - description: Insert username.
      name: username
      required: true
    - description: "A set of URL-encoded key/value pairs with additional contextual information associated with this authentication attempt. The Duo Mobile app will display this information to the user. For example: from=login%20portal&domain=example.com, The URL-encoded string's total length must be less than 20,000 bytes."
      defaultValue: "From=XSOAR&Confirm=Write%20your%20message%20here..."
      name: pushinfo
    - defaultValue: "Activities"
      description: This string is displayed in the Duo Mobile app push notification and UI.
      name: type
    description: Send push message to Duo user.
    name: duoauth-push-notification
    outputs:
    - contextPath: DuoAuth.PushNotification.Status
      description: Status of a Push message.
      type: String
    - contextPath: DuoAuth.PushNotification.Message
      description: E.g. if approved, "Success. Logging you in…".
      type: String
    - contextPath: DuoAuth.PushNotification.User
      description: Username receiving Push message.
      type: String
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)