Cisco Duo: Admin API

Adds a user to a user group in Cisco Duo. Note that this atomic will fail if the user is already in the group. This atomic requires the "Grant resource > Write" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Build the relative URL
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, set the output variables
[]> If a user wasn't found, return an error
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#associate-group-with-user

Cisco Duo - Admin - Add User to Group

prod-nam

prod-eu

prod-apjc

Fetches the most recent 1,000 administrator log entries from Cisco Duo. This atomic requires the "Grant read log" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Check if a start time was provided:
[]> Make sure the date is in the future
[]> Convert the date/times to a timestamp and set a local variable
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#administrator-logs

Cisco Duo - Admin - Get Administrator Logs

Fetches a list of administrators from Cisco Duo filtered by an optional role. This atomic requires the "Grant administrators > Read" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was:
[]>> Attempt to extract the results (or return an error)
[]>> Check if a role filter was provided:
[]>>> If it was, filter the results and set the output variables
[]>>> If it wasn't, set the output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#administrators

Cisco Duo - Admin - Get Admins

Fetches authentication logs from Cisco Duo for the given time period. Various filters are available including user IDs, group IDs, factors, results, and more. This atomic requires the "Grant read log" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Convert the date/times to the correct format
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#authentication-logs

Cisco Duo - Admin - Get Authentication Logs

Fetches a list of endpoints from Cisco Duo. This atomic requires the "Grant resource > Read" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#endpoints

Cisco Duo - Admin - Get Endpoints

Fetches information about user groups from Cisco Duo. This atomic requires the "Grant resource > Read" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#groups

Cisco Duo - Admin - Get Groups

Fetches a list of integrations configured in Cisco Duo. This atomic requires the "Grant applications" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#integrations

Cisco Duo - Admin - Get Integrations

Fetches global settings from Cisco Duo. This atomic requires the "Grant settings" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#settings

Cisco Duo - Admin - Get Settings

Fetches information about users from Cisco Duo. If a field to filter by isn't provided, all users are returned. This atomic requires the "Grant resource > Read" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Check if we're searching by user ID (if so, append the ID to the relative URL)
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If a user wasn't found, return an error
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#retrieve-users

Cisco Duo - Admin - Get Users

Removes a user from a user group in Cisco Duo. This atomic requires the "Grant resource > Write" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Build the relative URL
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, set the output variables
[]> If a user wasn't found, return an error
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#disassociate-group-from-user

Cisco Duo - Admin - Remove User from Group

Updates an existing user in Cisco Duo. This atomic requires the "Grant resource > Write" permission.

Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.

Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path

Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target

Steps:
[] Build the relative URL
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/adminapi#modify-user