Cisco Duo Integration Setup

Getting Started

Use this guide to connect Cisco Duo to your BalkanID tenant. You will need credentials from the Duo Admin Panel and access to the Integrations section in BalkanID.

Requirements:

Before you begin, collect the following values from Cisco Duo:

• Integration key

• Secret key

• API hostname

Configure Cisco Duo within your BalkanID tenant

1. To find the Integration key, Secret key, and API hostname, sign in to your Duo Admin Panel.

2. Navigate to Applications > Add a Application.

1. Search for Admin API, then click Add to create the application.

1. Under Permissions, enable Read under Grant administrators and under Grant resource (see Integration Scopes below), then click Save Changes.

2. Copy your Integration key, Secret key, and API hostname from the application's Details section.

3. In BalkanID, open the Cisco Duo integration and paste those values into the corresponding fields, then click Next.

   
4. Click Next to move onto Optional Configuration.

5. Fill Optional Configuration, if required.

   
6. Once you have filled in the information, click Save. Your integration is now configured and you will see the status of the integration displayed alongside other integrations on the Integrations page. When data is available, the integration Status column will read Connected and the integration Message will read Data available.

Integration Scopes

Read Only Scopes	Lifecycle Management Scopes
Grant resource (Read) — users, groups, MFA devices (phones, hardware tokens, passkeys/WebAuthn, desktop authenticators), bypass codes, and applications (integrations) Grant administrators (Read) — administrators, admin roles, and administrative units Grant Read Log (Optional) – Allows BalkanID to retrieve and display the last time an application was used.	N/A