Skip to content

Cisco Duo

Note that only administrators with the Owner role can create or modify an Admin API application in the Duo Admin Panel.

Ingestion of the following types of DUO logs is supported:

  • Duo Security Administrator
  • Duo Security Authentication
  1. Log in to the Duo Admin Panel and navigate to Applications.
  2. Click Protect an Application and locate the entry for Admin API in the applications list. Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname. You’ll need to provide these credentials to SolCyber via onetimesecret.com or other secure methods.
  3. The required permissions are:
    • Grant read log
    • Grant read information
    • Grant read resource