Update User

Update a user in Duo Security Admin.

Input

Field Definition Type Required
User
User ID Unique identifier of the user String TRUE
Username User's primary Duo username String FALSE
First Name User’s first name String FALSE
Last Name User’s last name String FALSE
Full Name User's full name String FALSE
Email User's email address String FALSE
Status

User's Duo status. This is one of:

  • active - user must complete secondary authentication
  • bypass - user will bypass secondary authentication after completing primary authentication
  • disabled - user will not be able to log in
Dropdown FALSE
Alias 1 Additional username alias String FALSE
Alias 2 Additional username alias String FALSE
Alias 3 Additional username alias String FALSE
Alias 4 Additional username alias String FALSE
Notes Free text field for additional user information String FALSE

Output

Field Definition Type
User
User ID Unique identifier of the newly created user String
Username User's primary Duo username String
First Name User’s first name String
Last Name User’s last name String
Full Name User's full name String
Email User's email address String
Alias 1 Additional username alias String
Alias 2 Additional username alias String
Alias 3 Additional username alias String
Alias 4 Additional username alias String
Created Date time stamp when user account was created String
Groups
Name Group's name String
ID Group's ID String
Description Group's description String
Status Group's authentication status; one of active, bypass, or disabled. String
Mobile OTP Enabled? If true, users in the group will be able to authenticate with a passcode generated by Duo Mobile; if false, users in the group will not be able to authenticate with a passcode generated by Duo Mobile. Note: This setting has no effect if Duo Mobile passcodes are disabled globally. Boolean
Push Enabled? If true, users in the group will be able to use Duo Push to authenticate; if false, users in the group will not be able to use Duo Push to authenticate. Note: This setting has no effect if Duo Push is disabled globally. Boolean
SMS Enabled? If true, users in the group will be able to use SMS passcodes to authenticate; if false, users in the group will not be able to use SMS passcodes to authenticate. Note: This setting has no effect if SMS passcodes are disabled globally. Boolean
Voice Enabled? If true, users in the group will be able to authenticate with a voice callback; if false, users in the group will not be able to authenticate with a voice callback. Note: This setting has no effect if voice callback is disabled globally. Boolean
Is Enrolled? true if the user has a phone, hardware token, U2F token, or security key available for authentication; otherwise, false. Boolean
Last Directory Sync Time stamp of the last update to the user via directory sync, or null if the user has never synced with an external directory or if the directory that originally created the user has been deleted from Duo. String
Last Login Last time this user logged in, as a UNIX timestamp, or null if the user has not logged in String
Status User's status:
  • active - user must complete secondary authentication
  • bypass - user will bypass secondary authentication after completing primary authentication
  • disabled - user will not be able to log in
  • locked out - user has been automatically locked out due to excessive authentication attempts
  • pending deletion - user was marked for deletion by a Duo admin from the Admin Panel, by the system for inactivity, or by directory sync; if not restored within seven days, the user is permanently deleted.
String
Phones
Activated? Indicates whether a phone has been activated for Duo Mobile; either true or false. Boolean
Capabilities List of factors that can be used with the device:
  • push - device is activated for Duo Push
  • phone - device can receive phone calls
  • sms - device can receive batches of SMS passcodes
  • mobile_otp - device can generate passcodes with Duo Mobile
String
Encrypted Encryption status of an Android or iOS device file system; one of Encrypted, Unencrypted, or Unknown; blank for other platforms. String
Extension Phone extension String
Fingerprint Indicates whether an Android or iOS phone is configured for biometric verification; one of Configured, Disabled, or Unknown; blank for other platforms. String
Last Seen Time stamp of the last contact between Duo's service and the activated Duo Mobile app installed on the phone; blank if the device has never activated Duo Mobile or if the platform does not support it. String
Model Phone's model String
Name Phone's label String
Number Phone number String
Phone ID Phone's ID String
Platform Phone platform; one of unknown, google android, apple ios, windows phone 7, rim blackberry, java j2me, palm webos, symbian os, windows mobile, or generic smartphone. String
Postdelay Time (in seconds) to wait after the extension is dialed and before the speaking the prompt String
Predelay Time (in seconds) to wait after the number picks up and before dialing the extension String
Screenlock Indicates whether screen lock is enabled on an Android or iOS phone; one of Locked, Unlocked, or Unknown; blank for other platforms. String
SMS Passcode Sent? Indicates whether SMS passcodes have been sent to the phone; either true or false. String
Tampered Indicates whether an iOS or Android device is jailbroken or rooted; one of Not Tampered, Tampered, or Unknown; blank for other platforms. String
Type Type of phone; one of unknown, mobile, or landline. String
Tokens
Token ID Hardware token's unique identifier String
Type Type of hardware token String
Serial Serial number of the hardware token, used to uniquely identify the hardware token when paired with type String
TOTP Step Null for all supported token types String
U2F Tokens
Date Added Date the U2F token was registered in Duo String
Registration ID U2F token's registration identifier String
WebAuthn Credentials
Credential Name Label for the WebAuthn credential String
Date Added Date the WebAuthn credential was registered in Duo String
Label Indicates the type of WebAuthn credential; either Security Key or Touch ID. String
WebAuthn Key WebAuthn credential's registration identifier String
Notes Additional user information String

Related topics

Duo Security Admin connector

About the elements of Okta Workflows

Duo Security Admin Documentation