I’m one of three admins for our Duo install. I went in today to add a new user, and noticed that one user is set to Bypass. I didn’t make this change, and the other two admins say they didn’t, either.
Is there any accessible record of changes that are made to user accounts? I can look at the user logs and see the first time this user is marked as having bypassed Duo, but I’m trying to find out who made the change to his access and when.