Skip to main content

Verify End-User Identity with DUO

  • Updated

Background

CyberQP now supports verifying end-users via DUO push notifications. This article provides a walkthrough on leveraging that functionality on the CyberQP dashboard.
 

Pre-requisites

  • Your DUO admin portal account has Owner role (https://duo.com/docs/admin-roles)
  • Your DUO admin portal has a DUO Admin API application configured according to DUO documentation (https://duo.com/docs/adminapi).
  • Your DUO users have enrolled for DUO mobile application push notifications according to DUO documentation (https://duo.com/docs/enrolling-users).
  • The end-users are imported to the desired customer in the CyberQP admin dashboard.
  • The end-user mobile device must have an active internet connection.
     

Table of Contents

Setup

The following steps will show how to connect your DUO Admin API application to your CyberQP customer(s).

Create the DUO Admin API Application

  1. Sign in to your DUO admin portal
  2. Click into Applications > Manage > Applications
  3. Find your pre-existing Admin API application, or add a new Admin API application according to DUO documentation (https://duo.com/docs/adminapi).
    • Note that only administrators with the Owner role can create or modify an Admin API application in the Duo Admin Panel (learn more)
  4. Make note of the following values:
    • Integration Key
    • Secret Key
    • API Hostname
  5. Ensure the following permissions are granted:
    • Grant administrators - Read/Write
    • Grant read information
    • Grant applications
    • Grant settings
    • Grant read log
    • Grant resource - Read/Write
    • Grant set Admin API permissions
  6. If you wish to enforce IP restriction, enter the CyberQP data center IP addresses for your region (Firewall Port Exceptions / IP Whitelisting for Agent and API Communication)

duo admin api application example

duo admin api permissions

duo admin api network access

Connecting Your First Customer

1. Sign in to the CyberQP admin dashboard

2. Find the desired customer, then click the three-dot icon and select 'Set up Duo'

3. Enter a configuration name

4. Populate the following values (defined in DUO):

  • Integration Key
  • Secret Key
  • API Hostname

5. Click Connect

duo integration option for cyberqp customer

duo integration with cyberqp setup interface

Connecting Other Customers

Option 1 - Use a pre-existing configuration

Admin API applications in DUO can be created per DUO subaccount/client. If you would like to use the same Admin API for more CyberQP customers, complete the following

1. Sign in to the CyberQP admin dashboard

2. Find the desired customer, then click the three-dot icon and select 'Set up Duo'

3. Click into the 'Select existing Duo configuration'

4. Select the desired pre-existing configuration

5. Click Connect

duo integration option for cyberqp customer

duo integration with cyberqp setup interface

Option 2 - Create a new configuration

Admin API applications in DUO can be created per DUO subaccount/client. If you would like to use a different Admin API for a specific CyberQP customer, complete the following

1. Sign in to the CyberQP admin dashboard

2. Find the desired customer, then click the three-dot icon and select 'Set up Duo'

3. Enter a configuration name

4. Populate the following values (defined in DUO):

  • Integration Key
  • Secret Key
  • API Hostname

5. Click Connect

duo integration option for cyberqp customer

duo integration with cyberqp setup interface

 

Configure Identity Verification

The following steps will show how to match your imported CyberQP end-users to DUO users and verify end-user identity

Match CyberQP End-User with DUO User

1. Sign in to the CyberQP admin dashboard

2. Find the desired customer and click into it

3. Click Match Accounts

4. Confirm any auto-matches, or click into the 'Match with Duo user' box to manually select the DUO user to match to

5. If the auto-match is incorrect or undesired, click the 'pencil' icon to select a new DUO user or click the 'trash' icon to delete the match

6. Click Save

NOTE: Auto-matching will complete based on 1) Username and 2) Email

end-user matching with duo

auto-match found

no auto-match found

 

Send Identity Verification to End-User with DUO

Identity verification with DUO is supported from the CyberQP admin dashboard, as well as the following PSA tools via the CyberQP Pod/Insight/Tab:

  • Halo
  • Autotask
  • Connectwise

From the CyberQP admin dashboard

1. Sign in to the CyberQP admin dashboard

2. Find the desired customer and click into it

3. Find the desired end-user, click the three-dot icon on the right-most side

4. Select 'Verify User Identity'

5. In the 'Push Notification' section, select DUO

6. Select the desired device

7. Click Send

device selection for duo identity verification

approved identity verification

From your PSA tool

Connectwise Manage

To add the CyberQP Pod to your CW Manage service tickets, click here - Add Quickpass POD to ConnectWise Manage Service Ticket

cw manage service ticket

device selection for duo identity verification

approved identity verification

Halo PSA

To add the CyberQP tab to your Halo PSA service tickets, click here - HaloPSA Integration Setup Guide

halo psa service ticket

device selection for duo identity verification

approved identity verification

Datto Autotask

To add the CyberQP Insight to your Autotask service tickets, click here - Enabling the Kaseya (Datto) AutoTask Insight for CyberQP

datto autotask service ticket

device selection for duo identity verification

approved identity verification

end of article


 

Related articles

Comments

0 comments

Please sign in to leave a comment.