About the Duo Security Identity Integration
Duo Security Identity is Cisco Duo’s multi-factor authentication and access security platform, helping organizations verify users and the devices they use before granting access to applications and resources. Part of Synqly’s Identity Unified API, the Duo Security Identity integration enables security platforms to access normalized identity data through a standardized connector. Integrate with Duo Security Identity to bring authentication and access context into your SIEM, threat detection, and security operations workflows without managing the Duo API directly.
Integration Use Cases
Disable User
Disables a user in the identity system based on user ID.
Enable User
Reenables a disabled user in the identity system based on user ID.
Get Group
Returns a `Group` object wrapped in an OCSF Entity Management event of type Read from the token-linked identity provider. Depending on the providers offerings, this may include additional group information, such as the roles assigned.
Get Group Members
Returns list of `User` objects wrapped in an OCSF Entity Management event of type Read from the token-linked identity provider that are members in the group referenced by ID.
Get User
Returns a `User` object wrapped in an OCSF Entity Management event of type Read from the token-linked identity provider. Depending on the provider\'s offerings, this may include additional user information, such as the user\'s current groups and roles.
Query Audit Log
Returns a list of `Event` objects from the token-linked audit log.
Query Groups
Returns a list of `Group` objects wrapped in the OCSF Entity Management event of type Read from the token-linked identity provider.
Query Users
Returns a list of `User` objects wrapped in the OCSF Entity Management event of type Read from the token-linked identity provider.
