We have a use case in our environment where some users need to be permanently deleted when their AD Sync’d groups are removed, rather than having them move to the “pending deletion” status for a period of time. We don’t have the Admin API set up curr...

We’re beginning to get a Duo deployment for our IT department off the ground, with 2FA planned for our VPN and Citrix services first, with SSH and some web services coming shortly after. Can anyone shed some light on best practices for user/group man...