Directory Sync custom schedule

[jsiergiej1]

Has anyone figured out a way to initiate a directory sync other than via the sync now button or system scheduled 10am sync time? I’d like to kick off a sync automatically at a time other than set time of 10am in the DUO admin panel, which I can’t change.

We remove remote access to users for 5 days per year by automatically adding/removing them from an AD group at midnight of the day they leave/return. The scheduled sync time of 10am won’t work for us since users obviously connect at 8am or before. If the sync didn’t happen yet and they get in, we have to answer to auditors. If they’re still disabled when they return and then they can’t get in, we have to deal with support calls.

[Steve_M]

I wanted to move our sync time as well, but was told that is not an option. I submitted a feature request. Don’t know if this is planned for a future release or not.

[AlexHart]

I would like to request this as well.
Here’s another request: Request for the ability to adjust the sync time and interval

[Semicolon]

Its not awesome; but you may be able to leverage the Duo Admin API to make an API to sync a single user (repeat as necessary for each user), adding that step to the annual disabling/enabling process shouldn’t be too bad.

Duo Security

Duo Admin API

The Admin API provides programmatic access to administrative functionality of Duo Security’s two-factor authentication platform. Learn more.

[GMS.Travis.Johnson]

I can’t believe that this is still an outstanding issue for a security product. Every publicly traded company that is integrating into their directory is going to need this feature to be able to handle SOX audits at a minimum. Browsing the Admin API, I’m not seeing a directory sync command, so the last resort is to reproduce the code logic that manually adds/removes users to the DUO groups outside of the directory sync. It works, but that is by no means an enterprise solution. We really need the ability to sync with an AD group more than once a day. I can see saying no to more than once an hour, but otherwise, this is just silly.

[bguyette]

I would like to request this as well.  Coming from OneLogin to Duo the syncing is already biting us.  Once an hour I can explain better than sorry you missed your window until midnight. 

[DuoKristina]

Hi there. To submit feature requests for Duo please contact your Duo account exec or customer success manager. If you don't have one of these you can contact Duo Support to submit or upvote feature requests. Community posts don't automatically create feature requests for our product team.