Learn about importing Duo users and groups from your existing external directories into Duo.
Organizations with an existing on-premises Microsoft Active Directory domain or a cloud-hosted Azure Active Directory can import users, phones, and groups into Duo with directory synchronization. User information for imported users is updated regularly to reflect the latest user status and associated device information. Deprovision synced users in Duo by disabling the external directory accounts or removing those users from the synced groups.
Duo imports users via LDAP from Active Directory domains. When configuring AD sync, you'll need to install the Duo Authentication Proxy application on a domain-joined server.
Duo imports users directly from Azure, without any additional on-premises software installation.