Self-enrollment takes less than two minutes for most users.

Self-enrollment: Users add themselves to Duo through a browser interface and step through the installation and configuration of Duo Mobile.

See more information about importing users.

Import users: Admin can create detailed entries for each user with a simple CSV file.

Entra ID sync: For customers using a Microsoft Entra ID domain as their user identity store.

OpenLDAP sync: For customers who use an OpenLDAP directory for authentication.

Active Directory sync: For customers who already rely on an Active Directory (AD) domain.

Automatic enrollment: Admins can add a group of users and then send them activation links that the user follows to complete their enrollment.The automatic enrollment and self-enrollment methods save you the time and effort of manually adding your Duo users. There are three methods of user enrollment: automatic enrollment, self-enrollment, and manual enrollment. These users still need to complete device enrollment and activation to fully use Duo. A partially-enrolled user is one who exists in Duo with a username but has no two-factor authentication methods. User access can be restricted to specific applications through permitted groups for individual applications.Īn enrolled user is an end user who accesses Duo-protected services or applications, who exists in Duo as a user with an associated two-factor authentication method. Users (identified by their usernames) are shared between applications, so a user only needs to complete enrollment and activation in Duo once to gain access to multiple applications. Be sure to also enroll your Duo admins as users if they need to log on to Duo protected services. They can't be used to access devices or applications using Duo two-factor authentication. Duo user accounts and admin accounts are distinctĭuo administrator accounts are only used to log on to the Admin Panel.

Reading hospital duo mobile app