DuoAuth

The Duo Auth API lets developers integrate with Duo Security's platform at a low level.

Authentication & Identity Management · DuoAuth

Details

ID	`DuoAuth`
Provider	Cisco Systems
Category	Authentication & Identity Management
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

README

The Duo Auth API lets developers integrate with Duo Security’s platform at a low level.

Configure DuoAuth in Cortex

Parameter	Required
Trust any certificate (not secure)	False
Use system proxy settings	False
API Hostname	True
Integration Key	True
Secret Key	True

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

duoauth-push-notification

Send push message to Duo user.

Base Command

duoauth-push-notification

Input

Argument Name	Description	Required
username	Insert username.	Required
pushinfo	A set of URL-encoded key/value pairs with additional contextual information associated with this authentication attempt. The Duo Mobile app will display this information to the user. For example: from=login%20portal&domain=example.com, The URL-encoded string’s total length must be less than 20,000 bytes. Default is From=XSOAR&Confirm=Write%20your%20message%20here….	Optional
type	This string is displayed in the Duo Mobile app push notification and UI. Default is Activities.	Optional

Context Output

Path	Type	Description
DuoAuth.PushNotification.Status	String	Status of a Push message.
DuoAuth.PushNotification.Message	String	E.g. if approved, “Success. Logging you in…”.
DuoAuth.PushNotification.User	String	Username receiving Push message.

Configuration parameters

insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
api_hostname — API Hostname (required)
integration_key — (required)
secret_key — (required)

Commands (1)

duoauth-push-notification
Send push message to Duo user.

Source

DuoAuth.py DuoAuth.yml DuoAuth_description.md

Download History Raw

# Using Duo Auth integration for XSOAR

## First Steps
Before starting:
1. [Sign up for a Duo account](https://signup.duo.com/) if you aren't already a customer. Your free 30-day Duo Advantage trial includes Auth API access. 
2. Log in to [Duo Admin Panel](https://admin.duosecurity.com/) and navigate to Applications → Protect an Application.
3. Locate the entry for Auth API in the applications list. Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname.