Pre-requisites
Generate Duo Security Admin API
The Admin API allows you to programmatically create, retrieve, update, and delete users, phones, hardware tokens, admins, applications, and more1
Step 1
-
Log in to your Duo Admin Panel.

-
Navigate to Applications → Protect an Application.

2
Step 2
Generate Admin API Credentials
- Search for the type of integration “Admin API”.
-
Click Protect to the far right to configure the Auth API.

- Scroll down to the Permissions section.
-
Select the required permissions (
Grant read information,Grant read log, andGrant read resource. -
Click Save Changes.

-
In the Details section, copy and secure the Integration Key (ikey) – Identifies your app, Secret Key (skey) – A secure credential, and API Hostname – URL to interact with Duo.

3
Step 3
Email the Integration Key (ikey), Secret Key (skey), and the API Hostname URL to AirMDR or self Configure Duo Security in AirMDR Integrations Dashboard.
Configure Duo Security Admin API in AirMDR Integrations Dashboard
-
Navigate to AirMDR, provide the credentials and click Login.

-
Navigate to the AirMDR Integrations Dashboard in the left navigation pane and select Integrations.

- Use the search option, enter the keyword “Duo Security”, select the Connections tab, and click Add New Connection.
-
Enter an unique name to the Instance (e.g., your org name-DuoSecurity) and brief Description to easily identify the user connection by AirMDR.

-
Enter the generated Integration Key (ikey), Secret Key (skey), API Hostname URL and Expiry (optional) in the Authentication Details field params, and click Save.

Test the Integration
- Attempt login with a user enrolled in Duo.
- Check if push notifications, SMS, or OTP codes work.
- Monitor API logs in the Duo Admin Dashboard.

