Cisco Customer Success - Video

Duo Directory Sync

Playback confirmation!

Do you want to resume playing from last left location?

Chapter 1 Thumbnail
00:00
Introduction and Duo Directory Sync overview
Chapter 2 Thumbnail
00:27
Connecting external directories: AD, Entra ID, Google, Okta
Chapter 3 Thumbnail
00:50
Enrollment options and automated enrollment emails
Chapter 4 Thumbnail
01:37
Configuring Microsoft Entra ID sync in the Duo Admin Panel
Chapter 5 Thumbnail
02:27
Benefits, best practices, and summary

Transcript

Hi, I'm Mariah Willitzki, customer success specialist here at Cisco, and today I'm gonna give a quick overview of Duo directory Sync focusing on the value it adds during the enrollment process. Duo directory Sync allows organizations to synchronize users and groups from external director.00:00Into the duo tenant, streamlining user management and enrollment.00:20Duo allows a connection to an external directory to sync users into Duo, ensuring that directory values always stay consistent and remain centrally managed. Whether it's connecting an on prem directory like Active Directory using the Duo Off proxy, or by connecting with the cloud directory.00:27Like intra ID, Google or Okta.00:47Duo provides a clean and user friendly approach to user management. And we offer several different ways to enroll users in duo. With Duo directory Sync being by far the easiest method that's available. Simply select Enable the setting, and when users are synced into duo.00:50So they will receive an enrollment email to set up Duo mobile. This gives them access to duo push.01:10Alternative methods of enrollment include inline or bulk self enrollment, manual admin driven enrollment, and enrollment via the admin API itself. To create a Microsoft entry ID external directory within the duo admin panel, you're gonna 1st navigate to users.01:17And select external directories.01:37This is where you could define and configure different external directories. Then click add external directory on the right and select Microsoft Entra ID. On the left under the Microsoft Entra ID connection, select add new connection.01:39This will allow us to authorize ENTRAID to share user data with your duo tenant.01:59Select continue to proceed, and then you will be prompted to log into your Microsoft administrator account. Read and accept the terms listed by selecting the checkbox below. Click accept, and this will create your Duo Azure AD sync application, allowing.02:05The entraid users to sync to your duo tenant.02:24What this is gonna do, it's gonna reduce administrative overhead by automating user provisioning and deprovisioning. It supports phased deployments by combining sync with self enrollment methods, ensures up to date user information by syncing regularly.02:29Use enrollment email settings carefully to avoid sending outdated device info and always verify group and attribute selections to match organizational needs. And in summary Duo directory Sync offers flexible options to integrate your existing user directories with Duo Security. Simplifying you.02:47User onboarding and enhancing security through streamlined enrollment and centralized user management. Thanks for watching.03:06

About this Video

Author : Cisco Customer Success

Uploaded : March 06, 2026

SecurityDuo
AI summary icon

AI summary

Explore Cisco Duo Directory Sync to streamline enrollment by syncing users and groups from Microsoft Entra ID, Google, Okta, and on-prem Active Directory via the Duo Auth Proxy. See step-by-step setup in the Admin Panel, then enable enrollment emails that prompt Duo Mobile for Duo Push. Compare self-enrollment, admin-driven, and Admin API options, and apply best practices for phased rollouts, automated deprovisioning, and accurate group and attribute selection.

  • Reduce administrative overhead with automated provisioning and deprovisioning.
  • Accelerate secure onboarding with consistent directory values and enrollment emails.
  • Mitigate errors by validating groups, attributes, and email settings during deployment.