Skip to main content

Run Preauth

Run to discover whether a user is authorized to log in, and if so, return the user's available authentication factors.

External Documentation

To learn more, visit the Duo Auth documentation.

Basic Parameters

ParameterDescription
User IDThe unique identifier for the user as generated by Duo upon user creation.Can be obtained by the List Users action in the Duo collection.Important To Note: The Duo collection has a separate connection that requires Admin API Credentials. Please follow our Duo documentation to obtain them.
User Info TypeChoose the user's information to provide. You must specify either the user ID or the username.
UsernameThe Unique username that is commonly specified during user creation. This value may also represent a username alias assigned to a user.Can be obtained by the List Users action in the Duo collection.Important To Note: The Duo collection has a separate connection that requires Admin API Credentials. Please follow our Duo documentation to obtain them.

Advanced Parameters

ParameterDescription
Client Supports Verified PushSet this parameter to 1 if your client supports Verified Duo Push, allowing it as an authentication method when required.If not provided or set to 0, Verified Duo Push will be ignored, and the Require Verified Duo Push policy will be bypassed.For additional information regarding this parameter, please visit Duo's documentation.
HostnameThe host name of the device accessing the application.
IP AddressThe IP address of the user to be authenticated.If an Auth API client does not send the ipaddr value in a request, policy settings based on available IP address information, like authorized networks or user location have no effect.
Trusted Device TokenReturn an "allow" response for the lifetime of the trusted_device_token, if the token is present and the policy enables Remembered Devices for browser-based applications.

Example Output

{
"stat": "OK",
"response": {
"devices": [
{
"capabilities": [
"auto",
"push",
"sms",
"phone",
"mobile_otp"
],
"device": "DPFZRS9FB0D46QFTM891",
"display_name": "iOS (XXX-XXX-0100)",
"name": "",
"number": "XXX-XXX-0100",
"type": "phone"
},
{
"device": "DHEKH0JJIYC1LX3AZWO4",
"name": "0",
"type": "token"
}
],
"result": "auth",
"status_msg": "Account is active"
}
}

Workflow Library Example

Run Preauth with Duo Auth and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop