Duo Security

About this document

This document provides the step-by-step procedure to configure Duo Security in SAFE.

Introduction

SAFE integrates with Duo Security and fetches the security misconfiguration of the Duo Security account in SAFE.

Prerequisites

• Access required in SAFE:

  • SAFE Admin Access

• Access required in Duo Security:

  • Duo Security Admin

• Required User Inputs:

  • API URL

  • Integration Key

  • Secret Key

  • Asset Name in SAFE (optional)

• Required Scope:

  • Grant Read Information

  • Grant Settings

Generate Connection Details

• How to generate Integration Key, Secret Key and API URL

  • Log in to your Duo Security account as Admin.

  • Click on the Applications

  • Click on the Protect and Application

  • Search for Admin API

  • Click on the Protect button

    

  • The system displays the Integration key, Secret key and API hostname. Copy and save the details to use it while configuring Duo Security in SAFE.

  • Append https:// in API hostname to form the API URL

  • Select the below Permissions

    • Grant administrators

    • Grant read information

    • Grant setting

      

  • Scroll down and click on the Save changes

Configure Duo Security in SAFE

• Log in to your SAFE account as Admin.

• Click on the Integrations option from the left navigation.

• Scroll to find the Duo Security integration card or search for Duo Security in the search bar.

  

• Hover over the Duo Security integration card and click on the Configure button.

• Enter the following:

  • API URL

  • Integration Key

  • Secret Key

  • Asset Name in SAFE -  Provide a unique identifier which can uniquely identify the asset

• Enter the Auto Sync Frequency.

• Click on the Test Connection button.

• Once the connection is successful, click on the Save button.

  

• Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.

  

• Upon a successful sync, the system pulls the Duo Security assets and their findings in SAFE. You can track the status of the sync in the History table.

View Results

• Go to the integration homepage

• Scroll to find the Duo Security integration card or search for Duo Security in the search bar.

• Click on the Duo Security integration card for Finding View and Asset View.

  • Finding View: This tab displays all the findings details pulled from Duo Security.

    

  • Asset View: This tab displays all the assets pulled from Duo Security.

    

History

Learn More about Integration History here.

SAFE's Outgoing IP Addresses

Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.