Duo Security
Purpose
Imports users, phones, tokens, and integrations from Duo Security to help validate MFA coverage across your estate.
tip
Secret fields below accept either an AWS Secrets Manager ARN or a value pasted directly into SubImage's managed vault. See Secrets for details.
Required Fields
| Field | Secret? | Description |
|---|---|---|
duo_api_key |
No | Duo Integration Key (IK) |
duo_api_secret |
Yes | Duo Secret Key (SK) |
duo_api_hostname |
No | API hostname, e.g. api-12345678.duosecurity.com |
Setup Steps
- Create an Admin API application in the Duo console. Copy the Integration Key, Secret Key, and hostname.
- In SubImage, fill in
duo_api_key,duo_api_secret(or its AWS Secret ARN), andduo_api_hostname. Save the module.
Uses the Duo v2 Admin API over HTTPS.