> ## Documentation Index
> Fetch the complete documentation index at: https://docs.airmdr.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Duo Security

> Duo Security is a cloud-based multi-factor authentication (MFA) and access security platform that helps protect applications and networks by requiring users to verify their identity using multiple authentication methods before granting access.

### Pre-requisites

<Tip>
  User Organization must have valid credentials to access the [Duo Admin Panel](https://admin.duosecurity.com/).
</Tip>

### Generate Duo Security Admin API

The Admin API allows you to programmatically create, retrieve, update, and delete users, phones, hardware tokens, admins, applications, and more

<Steps>
  <Step title="Step 1">
    1. Log in to your [Duo Admin Panel](https://admin.duosecurity.com/).

           <img src="https://mintcdn.com/airmdr/wnBXbVlE7mmN9W6R/images/Duo8.png?fit=max&auto=format&n=wnBXbVlE7mmN9W6R&q=85&s=7fc4c919be592b6b3d86dd5f8598a492" alt="images/Duo8.png" width="301" height="458" data-path="images/Duo8.png" />
    2. Navigate to **Applications** → **Protect an Application**.

           <img src="https://mintcdn.com/airmdr/wnBXbVlE7mmN9W6R/images/Duo1.png?fit=max&auto=format&n=wnBXbVlE7mmN9W6R&q=85&s=01781436de5bd5ab9e1753ba4b9701c3" alt="images/Duo1.png" width="686" height="678" data-path="images/Duo1.png" />
  </Step>

  <Step title="Step 2">
    **Generate Admin API Credentials**

    1. Search for the type of integration "Admin API".
    2. Click **Protect** to the far right to configure the Auth API.

           <img src="https://mintcdn.com/airmdr/wnBXbVlE7mmN9W6R/images/Duo2.png?fit=max&auto=format&n=wnBXbVlE7mmN9W6R&q=85&s=0c2ae2916ec09baea754ce7d8bbb34bd" alt="images/Duo2.png" width="770" height="346" data-path="images/Duo2.png" />
    3. Scroll down to the Permissions section.
    4. Select the required permissions (`Grant read information` , `Grant read log`, and `Grant read resource` .
    5. Click **Save Changes**.

           <img src="https://mintcdn.com/airmdr/wnBXbVlE7mmN9W6R/images/Duo3.png?fit=max&auto=format&n=wnBXbVlE7mmN9W6R&q=85&s=faa236695e3683669fa2b0774fa410f5" alt="images/Duo3.png" width="778" height="556" data-path="images/Duo3.png" />
    6. In the Details section, copy and secure the **Integration Key (ikey)** – Identifies your app, **Secret Key (skey)** – A secure credential, and **API Hostname** – URL to interact with Duo.

           <img src="https://mintcdn.com/airmdr/wnBXbVlE7mmN9W6R/images/Duo4.png?fit=max&auto=format&n=wnBXbVlE7mmN9W6R&q=85&s=3755efb4108221732c3ab49b4e067087" alt="images/Duo4.png" width="428" height="192" data-path="images/Duo4.png" />
  </Step>

  <Step title="Step 3">
    <Check>
      <Icon icon="envelope" /> Email the **Integration Key (ikey)**, **Secret Key (skey),** and the **API Hostname URL** to AirMDR or self Configure Duo Security in AirMDR Integrations Dashboard.
    </Check>
  </Step>
</Steps>

### Configure Duo Security Admin API in AirMDR Integrations Dashboard

1. Navigate to [AirMDR](https://app.airmdr.com/auth/login), provide the credentials and click **Login.**

   <img src="https://mintcdn.com/airmdr/wnBXbVlE7mmN9W6R/images/Datadog11.png?fit=max&auto=format&n=wnBXbVlE7mmN9W6R&q=85&s=94afec6835b90abcec516831e584184f" alt="" width="443" height="568" data-path="images/Datadog11.png" />
2. Navigate to the AirMDR Integrations Dashboard in the left navigation pane and select **Integrations.**

   <img src="https://mintcdn.com/airmdr/pl9e-Lras4_STslR/images/AirMDRLeftNavigationPane.png?fit=max&auto=format&n=pl9e-Lras4_STslR&q=85&s=66568edbd3f27bc058d589bfe23f3bcd" alt="Air MDR Left Navigation Pane Pn" width="472" height="1086" data-path="images/AirMDRLeftNavigationPane.png" />
3. Use the search option, enter the keyword "**Duo Security**", select the **Connections** tab, and click **Add New Connection**.
4. Enter an unique name to the **Instance** (e.g., your org name-DuoSecurity) and brief **Description** to easily identify the user connection by AirMDR.

   <img src="https://mintcdn.com/airmdr/omAfojQCy5hDto9g/images/Duo9.png?fit=max&auto=format&n=omAfojQCy5hDto9g&q=85&s=52ebfea45040603cbe4cb3018436ff20" alt="Duo9 Pn" width="2060" height="1272" data-path="images/Duo9.png" />
5. Enter the generated **Integration Key (ikey)**, **Secret Key (skey)**, **API Hostname URL** and Expiry (optional) in the Authentication Details field params, and click **Save.**

   <img src="https://mintcdn.com/airmdr/omAfojQCy5hDto9g/images/Duo10.png?fit=max&auto=format&n=omAfojQCy5hDto9g&q=85&s=24f5d957190671a1ffc6523040d55e10" alt="Duo10 Pn" width="1494" height="1446" data-path="images/Duo10.png" />

### Test the Integration

* Attempt login with a user enrolled in Duo.
* Check if **push notifications**, **SMS**, or **OTP codes** work.
* Monitor API logs in the **Duo Admin Dashboard**.
