cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
519
Views
0
Helpful
1
Replies

How to get unmasked phone number in preach API call?

Ravi_Akkiraju
Level 1
Level 1

Anyway we can get a full phone number for an userName instead of masked phone with only the last 4 numbers?

1 Reply 1

DuoPablo
Cisco Employee
Cisco Employee

Hi @Ravi_Akkiraju ,

Please note the information under the Auth API section in the following KB article: Knowledge Base | Duo Security

The attacker can make Auth API calls to retrieve the phone number for any user – however all but the last four digits are obfuscated (example: XXX-XXX-1234). This is limited risk, but phone numbers are sometimes considered sensitive information.

From an administrative perspective, you can use the Admin API to view a Duo user’s entire phone number.

Hope this helps!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links