Read User

User ID

Unique identifier of the user.

Username

User's primary Duo username.

First Name

User's first name.

Last Name

User's last name.

Full Name

User's full name.

Email

User's email address.

Alias 1

Additional username alias.

Alias 2

Additional username alias.

Alias 3

Additional username alias.

Alias 4

Additional username alias.

Created

Date and time when the object was created.

Name

Name of the group.

ID

Group's ID.

Description

Group's description.

Status

Group's authentication status; one of active, bypass, or disabled.

Mobile OTP Enabled?

If true, users in the group will be able to authenticate with a passcode generated by Duo Mobile; if false, users in the group will not be able to authenticate with a passcode generated by Duo Mobile. Note: This setting has no effect if Duo Mobile passcodes are disabled globally.

Push Enabled?

If true, users in the group will be able to use Duo Push to authenticate; if false, users in the group will not be able to use Duo Push to authenticate. Note: This setting has no effect if Duo Push is disabled globally.

SMS Enabled?

If true, users in the group will be able to use SMS passcodes to authenticate; if false, users in the group will not be able to use SMS passcodes to authenticate. Note: This setting has no effect if SMS passcodes are disabled globally.

Voice Enabled?

If true, users in the group will be able to authenticate with a voice callback; if false, users in the group will not be able to authenticate with a voice callback. Note: This setting has no effect if voice callback is disabled globally.

Is Enrolled?

If true, the user has a phone, hardware token, U2F token, or security key available for authentication; otherwise, false.

Last Directory Sync

Time stamp of the last update to the user via directory sync, or null if the user has never synced with an external directory or if the directory that originally created the user has been deleted from Duo.

Last Login

Last time this user logged in, as a UNIX timestamp, or null if the user has not logged in

Status

User's status:

• active - user must complete secondary authentication
• bypass - user will bypass secondary authentication after completing primary authentication
• disabled - user will not be able to log in
• locked out - user has been automatically locked out due to excessive authentication attempts
• pending deletion - user was marked for deletion by a Duo admin from the Admin Panel, by the system for inactivity, or by directory sync; if not restored within seven days, the user is permanently deleted.

Activated?

Indicates whether a phone has been activated for Duo Mobile; either true or false.

Capabilities

List of factors that can be used with the device:

• push - device is activated for Duo Push
• phone - device can receive phone calls
• sms - device can receive batches of SMS passcodes
• mobile_otp - device can generate passcodes with Duo Mobile

Encrypted

Encryption status of an Android or iOS device file system; one of Encrypted, Unencrypted, or Unknown; blank for other platforms.

Extension

Phone extension.

Fingerprint

Indicates whether an Android or iOS phone is configured for biometric verification; one of Configured, Disabled, or Unknown; blank for other platforms.

Last Seen

Time stamp of the last contact between Duo's service and the activated Duo Mobile app installed on the phone; blank if the device has never activated Duo Mobile or if the platform does not support it.

Model

Phone's model.

Name

Phone's label.

Number

Phone number.

Phone ID

Phone's ID.

Platform

Phone platform; one of unknown, google android, apple ios, windows phone 7, rim blackberry, java j2me, palm webos, symbian os, windows mobile, or generic smartphone.

Postdelay

Time (in seconds) to wait after the extension is dialed and before the speaking the prompt.

Predelay

Time (in seconds) to wait after the number picks up and before dialing the extension.

Screenlock

Indicates whether screen lock is enabled on an Android or iOS phone; one of Locked, Unlocked, or Unknown; blank for other platforms.

SMS Passcode Sent?

Indicates whether SMS passcodes have been sent to the phone; either true or false.

Tampered

Indicates whether an iOS or Android device is jailbroken or rooted; one of Not Tampered, Tampered, or Unknown; blank for other platforms.

Type

Type of phone; one of unknown, mobile, or landline.

Token ID

Hardware token's unique identifier.

Type

Type of hardware token.

Serial

Serial number of the hardware token, used to uniquely identify the hardware token when paired with type.

TOTP Step

Null for all supported token types.

Date Added

Date the U2F token was registered in Duo.

Registration ID

U2F token's registration identifier.

Credential Name

Label for the WebAuthn credential.

Date Added

Date the WebAuthn credential was registered in Duo.

Label

Indicates the type of WebAuthn credential; either Security Key or Touch ID.

WebAuthn Key

WebAuthn credential's registration identifier.