#Duo api postman code

Error code 40301 “ Access Forbidden” means you do not have the right level of license, as shown in the image.If you have a question about Postman tool functionality, please contact Postman support. Note: Postman is not a Cisco-developed tool. You can use Postman Tool to have a more visual output while you test the connectivity. Verify you use Trusted Endpoint in Auth Policy, as shown in the imageĬonnectivity test with Device Insights and DUO.Verify you use Duo Health Agent data in Auth Policy, as shown in the image.

#Duo api postman free

Duo Licensed for Duo Access, Duo Beyond (or any newer high-end license, MFA only or Free does not apply), as shown in the image.

In order to troubleshoot common issues with the SecureX and DUO integration, you can verify the connectivity and performance of the API. If you want to know more about the configuration, please review, this article here the integration module details. With Duo, you can confirm your identities in a snap, monitor the health of managed and unmanaged devices, set adaptive security policies tailored for your business, secure remote access without a device agent, and provide secure, user-friendly Single Sign-On quickly and easily. SecureX Device Insights provides a unified view of the devices in your organization and consolidates inventories from integrated data sources.ĭuo secures your workforce and takes access security beyond the corporate network perimeter to protect your data at every authentication attempt, from any device, anywhere. If your network is live, ensure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment.

#Duo api postman software

The information in this document is based on these software and hardware versions.

Prerequisites RequirementsĬisco recommends that you have knowledge of these topics. See Work with OAuth 2.0 Tokens, Users, and Roles.This document describes the steps to configure the integration and troubleshoot Device Insights and Cisco DUO integration.

Where is the exact URL of the site from which the CORS request will be posted. If you are using a CORS request to post the session token, add: Replace sample values indicated by with your actual values. This is what a 200 OK response looks like when MFA is not required.ĭownload for the Users API Sample Code cURL Set to the subdomain of the user that you want to log in.įor example, if your OneLogin URL is, enter splinkly as the subdomain value.

#Duo api postman password

Set to the password of the user that you want to log in. Set to the username or email of the user that you want to log in. You can use additional headers if needed.įor more information, see Logging a User in Via API and Create Session Via API Token. Add as many comma-delimited URIs as you like, limited only by header length. Set to the Origin URI from which you are allowed to send a request using CORS. This API can be called using the Authentication Only, Manage Users or Manage All scope. The access token must have been generated using an API credential pair created using the scope required to call this API. Set to the access token you generated using the Generate Token API. When you want to simply authenticate a user in OneLogin and MFA is required, you can just treat the token returned by the Verify Factor API in the 200 OK - Success message as a confirmation that the user has been authenticated. When MFA is required, the Create Session Login Token API works in close conjunction with the Verify Factor API call.

You can perform delegated authentication with or without MFA. Likewise, you can use the 401 - Unauthorized status code to indicate that a user could not be authenticated. In delegated authentication, you treat the token returned in the 200 OK - Success message as a confirmation that the user has been authenticated, but you do not use the session token itself. You can also use this API to delegate authentication of a user to OneLogin without starting a OneLogin session.

#Duo api postman how to

For detailed usage flows and examples that illustrate how to use this API to log a user in, see Logging a User in Via API.