Authentication Fails about duosecurity HOT 4 CLOSED

It depends on what API you're targeting. If you're a Duo Partner and need to access child accounts, you'll need the Accounts API. If you just want to modify settings in your own Duo tenant you need the Admin API. If you want to send push notifications, use the Auth API.

If you look at the Public folder in the DuoSecurity module in GitHub, you'll see that each API is segmented into their respective folders. The only exception to this is the Accounts API as it's just a wrapper around the Admin API.

from duosecurity.

Thanks for the info, I feel like there's a bunch of prereq information that I'm missing.

I'm trying to pull a basic list of users from our own Duo tenant, I run the Set-DuoApiAuth using Type Admin and when I run Get-DuoUsers, I get 40102 Invalid identity in request credentials FAIL. I've used the integration key and secret from the Auth API and from the Duo API applications and both get the same error.

from duosecurity.

The Auth API is specifically for sending push notifications, it does not work for anything else. You'll need to create an Admin API application and enable the correct settings.

This should point you in the right direction:
https://duo.com/docs/adminapi#first-steps

from duosecurity.

I have figured out the issue, we weren't using the Admin API. Once enabled and given the correct permissions the PowerShell module started returning the correct information. This issue can be closed.

from duosecurity.