Duo Beyond

Duo Beyond identifies corporate vs. personal devices, blocks untrusted devices, and give users secure access to internal applications.

Creating an API Key for Duo

Before configuring the Duo connector in Lucidum, you must first create an API Key. Lucidum will use the API key to access the Duo API.

NOTE

Note that only administrators with the Owner role may contact Duo Support to request access to the Admin API application, or can create or modify an Admin API application in the Duo Admin Panel.

1. Sign up for a Duo account.

2. Contact Duo Support to request Admin API access.

3. Log in to the Duo Admin Panel and navigate to Applications.

4. Click Protect an Application and locate Admin API in the applications list. Click Protect this Application to get your integration key, secret key, and API hostname.

5. Grant your Admin API application with the following permission:

   • Grant read resource - required to fetch basic information from Duo Beyond.

   • Grant administrators - required to fetch Duo Beyond administrators, and details about their hardware tokens (serial number, etc).

For more details, see https://duo.com/docs/adminapi#overview .

Configuring the Connector for Duo

To configure Lucidum to ingest data from Duo:

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears.

5. In the Settings page, enter the following:

   • Duo Admin API URL (required) - The API URL of the Duo Beyond. To get your API hostname, see the notes section below. For example, '[instance].duosecurity.com'.

   • Integration key (required) - Specify the integration key for your Admin API access.

   • Secret key (required) - Specify the secret key for your Admin API access. For details, see the section below.

   • Verify SSL. For future use.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.