# Cisco Duo

## Introduction 

Cisco Duo is a multi-factor authentication (MFA) and secure access platform developed by Cisco Systems. It is designed to enhance the security of online and network-based applications by adding an additional layer of authentication beyond just usernames and passwords. This guide will walk you through the steps required to integrate Cisco Duo with Perimeters.

## Available Features

* Misconfiguration Rules
* User Inventory
* Identity Rules
* Device Inventory

## Prerequisites

A Cisco Duo account user with the owner role and an API key for Admin API must be created by this account user.

<details>

<summary><strong>Follow these steps to generate the keys:</strong> </summary>

1. Login to Cisco Duo Owner Account.
2. Once logged in, navigate to Applications ->  Protect an Application.
3. Search "Admin API" and click "Add".
4. On Settings, Select Permissions -> `Grant administrators -> Read, Grant read information, Grant applications, Grant settings, Grant read log, Grant resource -> Read` and click 'Save Changes'
5. Copy API Hostname, Client Id, and Client Secret.

<img src="/files/k8y8wuOfKjK5w2cKVfp2" alt="" data-size="original">

</details>

## Required Privileges

| Scopes                      | Use                                                        |
| --------------------------- | ---------------------------------------------------------- |
| Grant resource (Read)       | Read Devices and Provisioned Application Details           |
| Grant read log              | Read Usage Activity                                        |
| Grant settings              | Read Settings and Configurations                           |
| Grant applications          | Read Integrated Provisioned Applications and their details |
| Grant read information      | Read general information about the Duo Instance            |
| Grant administrators (Read) | Read All Administrators                                    |

## Onboarding Cisco Duo in your Perimeters account

1. Go to "Integrations" -> Select "Cisco Duo" -> Click "+ Add" -> Click "+ Start Integration".
2. **"Namespace" -**\
   Fill in the previously copied API Hostname.
3. **"Integration** **Key" -**\
   Fill in the previously copied Client ID.
4. **“Secret** **Key” -**\
   Fill in the previously copied Client Secret.
5. Click **"Finish"** to complete the onboarding process.

Once you have completed these steps, Cisco Duo should be successfully integrated with your Perimeters account.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://support.perimeters.io/perimeters-documentation/connecting-perimeters/integrations-for-security-insights/saas-applications/cisco-duo.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.