Skip navigation
Duo Blog
Admin Login
Documentation

Manage Duo in Cisco Security Provisioning and Administration

Last Updated: November 14th, 2024

Contents

Related

Cisco Security Provisioning and Administration provides centralized management of Cisco Security products.

Overview

After purchasing the User Protection Suite, you can manage your Duo account through Cisco Security Provisioning and Administration. Provision your existing Duo account or create a new Duo account when you claim your subscription.

Requirements

  • A subscription claim code.
  • If you are provisioning an existing Duo account, you will need a Duo administrator with the Owner role that is also an administrator in Cisco Security Provisioning and Administration with the same email.

Provision a Duo Account

Follow the steps below to provision your existing Duo account or create a new Duo account in Cisco Security Provisioning and Administration.

  1. Log in to Cisco Security Provisioning and Administration as an administrator.

  2. Select the enterprise you want to activate Duo in or create a new enterprise.

  3. Click Claim subscription in the top-right.

  4. Enter the claim code you received when you purchased your suite in the Subscription claim code field and then click Next.

  5. Verify that "Cisco Duo" is listed under "Product". Click Claim subscription.

  6. On the "Overview" page, click the Start provisioning button next to "Cisco Duo" at the top of the page.

  7. Make selections for the following fields:

    • Region: Select your region.

    • Initial administrator: Select the administrator to complete provisioning in Duo. This administrator will receive the next-step instructions in their email. Only the administrators already registered in Cisco Security Provisioning and Administration will be shown.

      If you need to add a Duo Owner to Cisco Security Provisioning and Administration, follow the instructions to invite a user to your enterprise in Cisco Security Provisioning and Administration.

      Make sure that the initial administrator selected is also a Duo administrator with the Owner role. The administrator email selected must be the same email the Duo Owner uses to log into the Duo Admin Panel. This administrator will be the only one that can finish the provisioning in Duo.

    • Hosting Country: Select the country where the initial administrator is located.

    • How would you like to provision Duo?: Select Connect an existing account.

      If you are creating a new Duo account, please look for a separate email with further instructions.

    Provision Duo in Cisco Security Provisioning and Administration

  8. Click Provision at the bottom of the page.

  9. The administrator you selected during provisioning will receive an email with the subject line "Connect your existing Duo account to Cisco Security Cloud Control". This administrator must be the one to complete the rest of these steps. Verify that the enterprise information is correct in the email and then click Connect accounts. Note that the emailed link will expire in 7 days.

    If your organization uses e-mail filtering, be sure to allow the sender no-reply@duosecurity.com.

  10. The remaining steps assume that you selected yourself as the initial administrator. After clicking the link, you will be taken to the Duo Admin Panel. Log in as a Duo Owner administrator.

  11. Click Connect Duo to Security Provisioning and Administration at the top of the "Billing" page.

    Provision Duo Billing Page

  12. Read the information provided in the pop-up window and then click Authorize.

    Authorize Provisioning Duo

  13. You should receive an email about the successful connection shortly after authorizing. You can verify this in the Admin Panel by refreshing the Billing page. You should now be on the Duo Premier edition and see the name of the suite you purchased.

    If you provisioned your existing Duo account, your current telephony credits will not change. New and existing Duo accounts may add a credit card to purchase backup telephony credits.

Cisco Security Cloud Sign On

Role required: Owner

After provisioning your Duo account, you'll have the option to allow administrators to log in to the Duo Admin Panel using Cisco Security Cloud Sign On (SCSO). Administrators must be enrolled in SCSO to use this login method.

To enable Duo administrators to log in using SCSO:

  1. Log in to the Duo Admin Panel.

  2. Navigate to Users → Administrators → Admin Login Settings in the left sidebar.

  3. Enable SCSO by changing the Authentication Options setting in the "Cisco Security Cloud Sign On Configuration" section. The options for this setting are:

    • Disabled, authenticate with allowed Admin Authentication Methods only: (Default) SCSO login is unavailable. All Duo administrators log on with a username and password or SSO (if SSO is set up).

    • Enabled, authenticate with Cisco Security Cloud Sign On or another allowed Admin Authentication method: SCSO login is available. Duo administrators may choose to log in either via SCSO, SSO (if SSO is set up), or with a username and password.

    • Required, authenticate with Cisco Security Cloud Sign On only: SCSO login is available. Duo administrators with the Owner role may log in either via SCSO or with a username and password. All other administrator roles must log in via SCSO. By enabling this option, Single Sign-On with SAML will be disabled.

      Administrators must be invited to your Security Provisioning and Administration enterprise to log in via SCSO.

    Cisco Security Cloud Sign On Admin Login Setting

Troubleshooting

See the Cisco Security Provisioning and Administration User Guide for more information.

If you selected the wrong initial administrator when you started provisioning or need additional help, please contact Cisco Worldwide Support.