Also, users imported this way can be managed from the Duo Admin Panel right away.Īlthough the import users function is primarily intended to add users, you can also use it to update information for existing users and to delete Duo users whose accounts are no longer needed. The import users feature differs from bulk enrollment in that it allows the admin to supply additional user details (e.g., entries can be created already populated with a phone number and device platform, group memberships, multiple devices, etc.). Import Usersĭuo provides an Import Users feature that can import user information from a properly formatted CSV (comma-separated values) file. See the Active Directory Sync, OpenLDAP Sync, or Azure AD Sync instructions. Since many large organizations already rely on an on-premises Active Directory (AD) server or OpenLDAP Directory, or a cloud-hosted Azure AD directory to manage their users, Duo offers tools to import users and groups from those identity stores into Duo, with the option of automatically sending an enrollment email to every user imported without an attached phone who has a valid email address. Role required: Owner, Administrator, or User Manager. The automatic enrollment features are Directory Sync and Import Users. Automatic EnrollmentĪn alternative to self-enrollment is to use Duo's automatic enrollment features to create users, associate them with devices, then generate a Duo Mobile activation link for each user. For example, if you configure the User Location policy setting to deny access to a country, then the policy will also block any of your users who attempt to enroll in Duo from that country via a bulk enrollment link. Do not apply any global restrictions that could prevent user enrollment.
#Add duo admin account to another dvice manual#
The automatic enrollment and self-enrollment methods save you the time and effort of manually adding your Duo users. There are three methods of user enrollment: automatic enrollment, self-enrollment, and manual enrollment. These users still need to complete device enrollment and activation to fully use Duo. A partially-enrolled user is one who exists in Duo with a username but has no two-factor authentication methods. User access can be restricted to specific applications through permitted groups for individual applications.Īn enrolled user is an end user who accesses Duo-protected services or applications, who exists in Duo as a user with an associated two-factor authentication method. Users (identified by their usernames) are shared between applications, so a user only needs to complete enrollment and activation in Duo once to gain access to multiple applications. Be sure to also enroll your Duo admins as users if they need to log on to Duo protected services.
They can't be used to access devices or applications using Duo two-factor authentication. Duo user accounts and admin accounts are distinctĭuo administrator accounts are only used to log on to the Admin Panel.
0 kommentar(er)
