Cisco Duo: Auth API

Performs an asynchronous second-factor authentication for a Duo user by sending a push notification to the user's smartphone app, verifying a passcode, or placing a phone call. It is also used to send the user a new batch of passcodes via SMS. A username or user ID is required. This action returns a transaction ID which can be used to check request status.

Target: HTTP Endpoint for your Duo API hostname

Account Key: None (uses API keys)

Steps:
[] Validate that a username or user ID was provided
[] Generate a list of parameters to POST to Duo
[] Generate a signed signature for the request
[] Send the request to Duo
[] Set the workflow's output variables
[] Check if the request was successful:
[]> If it was, extract some values and set output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/authapi#/auth

Cisco Duo - Auth - Authenticate

prod-nam

prod-eu

prod-apjc

"Long-polls" for the next status update from the authentication process for a given transaction. As in, if no status update is available at the time the request is sent, it will wait until there is an update before returning a response.

Target: HTTP Endpoint for your Duo API hostname

Account Key: None (uses API keys)

Steps:
[] Generate a list of parameters to append to the request URL
[] Generate a signed signature for the request
[] Send the request to Duo
[] Set the workflow's output variables
[] Check if the request was successful:
[]> If it was, extract some values and set output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/authapi#/auth_status

Cisco Duo - Auth - Authentication Status

Verifies that the Duo Auth API integration and secret keys are valid and that the signature is being generated properly.

Target: HTTP Endpoint for your Duo API hostname

Account Key: None (uses API keys)

Steps:
[] Generate a signed signature for the request
[] Send the request to Duo
[] Set the workflow's output variables
[] Check if the request was successful:
[]> If it was, check that the response was OK
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/authapi#/check

Cisco Duo - Auth - Check

Begins enrollment with Duo for a new user. This creates the user in Duo and returns activation information used to configure Duo Mobile.

Target: HTTP Endpoint for your Duo API hostname

Account Key: None (uses API keys)

Steps:
[] Generate a list of parameters to POST to Duo
[] Generate a signed signature for the request
[] Send the request to Duo
[] Set the workflow's output variables
[] Check if the request was successful:
[]> If it was, extract some values and set output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/authapi#/enroll

Cisco Duo - Auth - Enroll

Check whether a user has completed Duo enrollment.

Target: HTTP Endpoint for your Duo API hostname

Account Key: None (uses API keys)

Steps:
[] Generate a list of parameters to POST to Duo
[] Generate a signed signature for the request
[] Send the request to Duo
[] Set the workflow's output variables
[] Check if the request was successful:
[]> If it was, extract some values and set output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/authapi#/enroll_status

Cisco Duo - Auth - Enrollment Status

Determines whether or not a user is authorized to log in using Duo and, if they are, returns the user's available authentication factors. If the user hasn't already configured Duo but is eligible to enroll, this will return enrollment information. A username or user ID is required.

Target: HTTP Endpoint for your Duo API hostname

Account Key: None (uses API keys)

Steps:
[] Validate that a username or user ID was provided
[] Generate a list of parameters to POST to Duo
[] Generate a signed signature for the request
[] Send the request to Duo
[] Set the workflow's output variables
[] Check if the request was successful:
[]> If it was, extract some values, check the result, and set output variables
[]> If it wasn't, return an error

More information about this API: https://duo.com/docs/authapi#/preauth