Integrates with Duo Security to provide push notification, passcode, phone call, and SMS-based two-factor authentication.

Prerequisites

1. Log in to the Duo Admin Panel.
2. Navigate to Applications → Protect an Application.
3. Search for and select Web SDK (or the appropriate application type).
4. Copy the Integration Key, Secret Key, and API Hostname into the fields below.
5. For admin operations (enrolment management), create a separate Admin API application and copy its credentials into the Admin fields.

Authentication Settings

Integration Key

The client ID for this application (starts with DI).

Secret Key

The secret key associated with the integration. Stored encrypted at rest.

API Hostname

Your Duo API hostname (e.g. api-xxxxxxxx.duosecurity.com).

Enrolment Enabled

When enabled, users without a Duo account will be prompted to enrol during login.

Admin API Settings

Optional. Required only for managing users and devices programmatically via the Duo Admin API.

Admin Integration Key

The integration key of the Admin API application.

Admin Secret Key

The secret key of the Admin API application. Stored encrypted at rest.

Admin API Hostname

The API hostname for admin calls (typically the same as the auth hostname).