Duo SSO

Record your Duo SSO connection as identity & sso evidence. Automated collection is not available for this provider yet.

Connect with an API token

1. In Duo SSO:

   1. Sign in to the Duo Admin Panel as an administrator with the Owner role.
   2. Go to Applications › Application Catalog, search for Admin API, and click + Add.
   3. On the new application's page, select only Grant resource - Read and Grant administrators - Read (leave write, settings and other grants unselected), then save the application.
   4. Copy the Integration key, Secret key and API hostname shown on the application's page.
   5. Paste the Secret key as the token, and enter the API hostname as the Base URL.

   Where to find the other values:

   • Base URL (optional): The Admin API application's page shows the API hostname (api-xxxxxxxx.duosecurity.com).
   • Account / Org / Workspace (optional): The Admin API application's page shows the Integration key.

   Duo SSO's public documentation does not cover every step.

   Source: duo.com, checked 2026-10-07.

2. On Compliance › Connectors, open Duo SSO, click Connect, choose API token and fill in:

   Field	What to enter
   API token / Personal access token	Required. Stored encrypted and never shown again.
   Base URL (optional)	—
   Account / Org / Workspace (optional)	—

3. Click Connect with token.

Frameworks

No automated compliance test reads Duo SSO yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Related

• Identity & SSO connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks