Duo

Set up Duo for automated tests with TrustCloud!

Purpose

Once you set up your compliance program, TrustCloud TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to only read metadata about the configuration settings for your Duo account and Duo Users and workstations so that TrustOps can validate and generate evidence for your compliance program.

Instructions to grant TrustCloud limited access to Duo data

1. Navigate to the Duo administrator console and click on ‘Applications’ in the left side navigation bar.
2. On the Application page, click on the “Protect an Application” button.
3. Click the “Protect” button in front of the ‘Duo Admin API’ row. You will be redirected to the Admin API page.
4. Copy the integration key, secret key, and API hostname.
5. Scroll down to the permissions section and select Grant Read Information, Grant Read Resource, Grant Administrators, Grant Settings, and Grant Read Log permissions. These permissions let TrustCloud read administrators, account settings, and authentication logs in addition to users, groups, and integrations.
   
   
6. Input the information you copied in step 4 into TrustOps connection setup.
7. Scroll to the bottom of the page and click on the “Save Changes” button.