How to Synchronize Users to Duo from Active Directory

This video explains how to synchronize users and groups with Duo Security from Active Directory (AD) using the Directory Sync feature and the Duo Authentication Proxy.

Directory Sync lets you import Duo user names and other identity information directly from your on-premises AD forest or domain or Active Directory Lightweight Directory Service (AD LDS) instance.

Duo Directory Sync is a one-way operation. No information from Duo is imported into your user directory. Synchronization runs on a daily schedule, or on-demand when initiated from the Admin Panel or programmatically via Admin API. Taking effect with our rolling release process from March 10 through 17, 2022, Directory Syncs will run automatically twice a day, at 12-hour intervals chosen at random when you create your sync. Prior to this release, syncs ran once a day.

The Directory Sync feature is part of the Duo Beyond, Duo Access, and Duo MFA plans.

To learn more about synchronizing users from Active Directory, read the documentation provided at duo.com/docs/adsync.