Integration Guide: Cisco Duo Admin

Published Date: June 25, 2026 | Last Updated: June 26, 2026

Overview

Tello IAM offers two separate Cisco Duo integrations. Cisco Duo Admin connects to the Duo Admin API to manage and monitor administrator accounts. Cisco Duo Users connects to the Duo Accounts API to manage end user accounts. These are distinct integrations with separate credentials and permissions — each must be connected independently.

This article covers the Cisco Duo Admin integration.

Before connecting

The Administrator completing this setup must have access to the Duo Admin Panel and permission to create Admin API applications. The Admin API application must be granted Grant administrators Read and Write permissions.

Step 1: Create an Admin API application in Duo

1. Sign in to the Duo Admin Panel.
2. Navigate to Applications → Protect an Application.
3. Search for Admin API and select Protect.
4. Under Permissions, enable Grant administrators with Read and Write access.
5. Save the application. Duo displays the API Hostname, Integration Key, and Secret Key for the application.
6. Copy all three values.

Important: Copy the Secret Key before leaving this page. It will not be shown again. If lost, a new Admin API application must be created.

Step 2: Connect Cisco Duo Admin in Tello IAM

1. Navigate to Integrations in the left navigation.
2. Select + Add Integration.
3. Search for Cisco Duo Admin and select Add.
4. Enter the API Hostname (for example, api-XXXXXXXX.duosecurity.com).
5. Enter the Integration Key.
6. Enter the Secret Key.
7. Select Test Connection to verify all values are valid. A Connection successful confirmation will appear if accepted.
8. Select Connect. The integration appears on the Integrations page and an initial sync begins automatically.

Verify the connection

After the initial sync completes, confirm the following on the Integrations page:

• The Cisco Duo Admin integration displays a status of Active
• A sync timestamp is present and reflects the completed sync
• User records on the Users page display detected Duo administrator permissions in the Access column

Reauthorizing the connection

If the integration loses authorization, it will display an error on the Integrations page. To reauthorize, locate the existing Admin API application in the Duo Admin Panel or create a new one, then select the integration row in Tello IAM, select Configure, and enter the updated credentials.

Related articles

• Cisco Duo Users — connect the Duo Accounts API to manage end user accounts
• Configuring Integrations — manage sync schedules, drift detection, and integration settings
• Understanding Errors — resolve integration errors and authorization failures

Seasoft Security Solutions LLC | Tello IAM