Pre-requisites
Generate Duo Security Admin API
The Admin API allows you to programmatically create, retrieve, update, and delete users, phones, hardware tokens, admins, applications, and moreStep 1
-
Log in to your Duo Admin Panel.

-
Navigate to Applications → Protect an Application.

Step 2
Generate Admin API Credentials
- Search for the type of integration “Admin API”.
-
Click Protect to the far right to configure the Auth API.

- Scroll down to the Permissions section.
-
Select the required permissions (
Grant read information,Grant read log, andGrant read resource. -
Click Save Changes.

-
In the Details section, copy and secure the Integration Key (ikey) – Identifies your app, Secret Key (skey) – A secure credential, and API Hostname – URL to interact with Duo.

Configure Duo Security Admin API in AirMDR Integrations Dashboard
-
Navigate to AirMDR, provide the credentials and click Login.

-
Navigate to the AirMDR Integrations Dashboard in the left navigation pane and select Integrations.

- Use the search option, enter the keyword “Duo Security”, select the Connections tab, and click Add New Connection.
-
Enter an unique name to the Instance (e.g., your org name-DuoSecurity) and brief Description to easily identify the user connection by AirMDR.

-
Enter the generated Integration Key (ikey), Secret Key (skey), API Hostname URL and Expiry (optional) in the Authentication Details field params, and click Save.

Test the Integration
- Attempt login with a user enrolled in Duo.
- Check if push notifications, SMS, or OTP codes work.
- Monitor API logs in the Duo Admin Dashboard.

