Cisco Duo

This guide configures a Duo Admin API application so Trustle can securely read your Duo users and groups.

Prerequisites

• A Duo account with the Owner or Administrator role.
• Access to the Duo Admin Panel.

Configure Cisco Duo

Log in to the Duo Admin Panel

Go to https://admin.duosecurity.com and sign in with your administrator account.

Create an Admin API Application

1. In the left sidebar, go to Applications.
2. Click Protect an Application.
3. Search for Admin API in the application list.
4. Click Protect next to Admin API.

Configure API Permissions

On the Admin API application page, grant the following permissions:

• Grant administrators — Read + Write
• Grant applications — top-level only
• Grant read log — top-level only
• Grant resource — Read + Write

Leave all write permissions unchecked. Trustle only needs read access.

Collect Credentials

From the Admin API application details page, copy the following three values:

• Integration key (ikey): a string like DIXXXXXXXXXXXXXXXXXX.
• Secret key (skey): a string like deadbeefdeadbeefdeadbeefdeadbeefdeadbeef.
• API hostname: a string like api-XXXXXXXX.duosecurity.com.

Caution

Store the secret key securely. Treat it like a password.

Connect in Trustle

1. Go to the Connections page in Trustle from the left menu.
2. Under Identity Providers, find the Duo logo and choose Connect.
3. Fill in the connection form:
   1. Connection Name: enter a descriptive name (for example, “My Duo Connection”).
   2. Integration Key: paste the integration key you collected.
   3. Secret Key: paste the secret key you collected.
   4. API Hostname: paste the hostname you collected.
4. Click Test Connection.
5. After the test succeeds, click Save Connection.

Security notes

Caution

Store the integration key and secret key only in Trustle. Do not share them in chat or commit them to version control.