duo
Create Duo MFA method
This endpoint creates a new MFA method of type Duo.
Method | Path |
---|---|
POST | /identity/mfa/method/duo |
Parameters
method_name
(string)
- The unique name identifier for this MFA method. Supported from Vault 1.13.0.username_format
(string)
- A template string for mapping Identity names to MFA methods. Values to substitute should be placed in{{}}
. For example,"{{identity.entity.name}}"
. If blank, the Entity's Name field is used as-is.secret_key
(string: <required>)
- Secret key for Duo.integration_key
(string: <required>)
- Integration key for Duo.api_hostname
(string: <required>)
- API hostname for Duo.push_info
(string)
- Push information for Duo.use_passcode
(bool: false)
- If true, the user is reminded to use the passcode upon MFA validation.
Sample payload
Sample request
Sample response
Update Duo MFA method
This endpoint updates the configuration of an MFA method of type Duo.
Method | Path |
---|---|
POST | /identity/mfa/method/duo/:method_id |
Parameters
method_id
(string: <required>)
- UUID of the MFA method.and all of the parameters documented under the preceding "Create" endpoint.
Sample payload
Identical to the preceding "Create" endpoint.
Sample request
Read Duo MFA method
This endpoint queries the MFA configuration of Duo type for a given method ID.
Method | Path |
---|---|
GET | /identity/mfa/method/duo/:method_id |
Parameters
id
(string: <required>)
– UUID of the MFA method.
Sample request
Sample response
Delete Duo MFA method
This endpoint deletes a Duo MFA method. MFA methods can only be deleted if they're not currently in use by a login enforcement.
Method | Path |
---|---|
DELETE | /identity/mfa/method/duo/:method_id |
Parameters
method_id
(string: <required>)
- UUID of the MFA method.
Sample request
List Duo MFA methods
This endpoint lists Duo MFA methods that are visible in the current namespace or in parent namespaces.
Method | Path |
---|---|
LIST | /identity/mfa/method/duo |
Sample request
Sample response