Duo

Set up Duo for automated tests with TrustCloud

Purpose

Once you set up your compliance program, TrustCloud TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack, and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to only read metadata about the configuration settings for your Duo account and Duo Users and workstations, so that TrustOps can validate and generate evidence for your compliance program.

Instructions to grant TrustCloud limited access to Duo data

1. Navigate to the Duo administrator console, and select Applications in the side navbar.
2. On the application page, click on Protect an Application.
3. Click the Protect button in the Duo Admin API row.
4. Once the previous step is complete, you will be redirected to the Admin API page. Copy the integration key, secret key, and API hostname.
5. Scroll down to the Permissions **section **and check the boxes next to the Grant read information and Grant read resource permissions.
6. Scroll to the bottom of the page and click Save Changes.
7. Input the information you copied in step 4 into TrustOps connection setup.