> ## Documentation Index
> Fetch the complete documentation index at: https://airmdr-docs-crowdstrike-skills-catalog.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Duo Security

> Duo Security is a cloud-based multi-factor authentication (MFA) and access security platform that helps protect applications and networks by requiring users to verify their identity using multiple authentication methods before granting access.

### Pre-requisites

<Tip>
  User Organization must have valid credentials to access the [Duo Admin Panel](https://admin.duosecurity.com/).
</Tip>

### Generate Duo Security Admin API

The Admin API allows you to programmatically create, retrieve, update, and delete users, phones, hardware tokens, admins, applications, and more

<Steps>
  <Step title="Step 1">
    1. Log in to your [Duo Admin Panel](https://admin.duosecurity.com/).
           <Frame>
             <img src="https://mintcdn.com/airmdr-docs-crowdstrike-skills-catalog/Ij-YYh2XKJINpB13/images/Duo8.png?fit=max&auto=format&n=Ij-YYh2XKJINpB13&q=85&s=3813a9a094075679ba36a0744df339d1" alt="images/Duo8.png" width="301" height="458" data-path="images/Duo8.png" />
           </Frame>
    2. Navigate to **Applications** → **Protect an Application**.
           <Frame>
             <img src="https://mintcdn.com/airmdr-docs-crowdstrike-skills-catalog/Ij-YYh2XKJINpB13/images/Duo1.png?fit=max&auto=format&n=Ij-YYh2XKJINpB13&q=85&s=d27ad1c48597c301743a53bcf280a77f" alt="images/Duo1.png" width="686" height="678" data-path="images/Duo1.png" />
           </Frame>
  </Step>

  <Step title="Step 2">
    **Generate Admin API Credentials**

    1. Search for the type of integration "Admin API".
    2. Click **Protect** to the far right to configure the Auth API.
           <Frame>
             <img src="https://mintcdn.com/airmdr-docs-crowdstrike-skills-catalog/Ij-YYh2XKJINpB13/images/Duo2.png?fit=max&auto=format&n=Ij-YYh2XKJINpB13&q=85&s=fb6733b4d17c10294a4e062c2a85f1fd" alt="images/Duo2.png" width="770" height="346" data-path="images/Duo2.png" />
           </Frame>
    3. Scroll down to the Permissions section.
    4. Select the required permissions (`Grant read information` , `Grant read log`, and `Grant read resource` .
    5. Click **Save Changes**.
           <Frame>
             <img src="https://mintcdn.com/airmdr-docs-crowdstrike-skills-catalog/Ij-YYh2XKJINpB13/images/Duo3.png?fit=max&auto=format&n=Ij-YYh2XKJINpB13&q=85&s=3dd8cdfb46375ecd626caba2aa4601ab" alt="images/Duo3.png" width="778" height="556" data-path="images/Duo3.png" />
           </Frame>
    6. In the Details section, copy and secure the **Integration Key (ikey)** – Identifies your app, **Secret Key (skey)** – A secure credential, and **API Hostname** – URL to interact with Duo.
           <Frame>
             <img src="https://mintcdn.com/airmdr-docs-crowdstrike-skills-catalog/Ij-YYh2XKJINpB13/images/Duo4.png?fit=max&auto=format&n=Ij-YYh2XKJINpB13&q=85&s=339558df481c48235250f8272024eb7c" alt="images/Duo4.png" width="428" height="192" data-path="images/Duo4.png" />
           </Frame>
  </Step>

  <Step title="Step 3">
    <Check>
      <Icon icon="envelope" /> Email the **Integration Key (ikey)**, **Secret Key (skey),** and the **API Hostname URL** to AirMDR or self Configure Duo Security in AirMDR Integrations Dashboard.
    </Check>
  </Step>
</Steps>

### Configure Duo Security Admin API in AirMDR Integrations Dashboard

1. Navigate to [AirMDR](https://app.airmdr.com/auth/login), provide the credentials and click **Login.**
2. Navigate to the AirMDR Integrations Dashboard in the left navigation pane and select **Integrations.**
3. Use the search option, enter the keyword "**Duo Security**", select the **Connections** tab, and click **Add New Connection**.
4. Enter an unique name to the **Instance** (e.g., your org name-DuoSecurity) and brief **Description** to easily identify the user connection by AirMDR.
5. Enter the generated **Integration Key (ikey)**, **Secret Key (skey)**, **API Hostname URL** and Expiry (optional) in the Authentication Details field params, and click **Save.**

### Test the Integration

* Attempt login with a user enrolled in Duo.
* Check if **push notifications**, **SMS**, or **OTP codes** work.
* Monitor API logs in the **Duo Admin Dashboard**.
