Skip to main content

DuoAuth

This Integration is part of the DuoAuth Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

The Duo Auth API lets developers integrate with Duo Security's platform at a low level.

Configure DuoAuth in Cortex#

ParameterRequired
Trust any certificate (not secure)False
Use system proxy settingsFalse
API HostnameTrue
Integration KeyTrue
Secret KeyTrue

Commands#

You can execute these commands from the CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

duoauth-push-notification#


Send push message to Duo user.

Base Command#

duoauth-push-notification

Input#

Argument NameDescriptionRequired
usernameInsert username.Required
pushinfoA set of URL-encoded key/value pairs with additional contextual information associated with this authentication attempt. The Duo Mobile app will display this information to the user. For example: from=login%20portal&domain=example.com, The URL-encoded string's total length must be less than 20,000 bytes. Default is From=XSOAR&Confirm=Write%20your%20message%20here....Optional
typeThis string is displayed in the Duo Mobile app push notification and UI. Default is Activities.Optional

Context Output#

PathTypeDescription
DuoAuth.PushNotification.StatusStringStatus of a Push message.
DuoAuth.PushNotification.MessageStringE.g. if approved, "Success. Logging you in…".
DuoAuth.PushNotification.UserStringUsername receiving Push message.