Duo Tables

Tables

DuoAccountSettings

Stores high-level configuration settings for a Duo account/tenant (for example, security and administrative preferences that affect how Duo behaves for that account).

Name	Type	Description
ID	integer	Compyl-defined ID for the object. Not provided by the API.
CallerID	string	The caller ID phone number used for voice authentication calls.
DuoMobileOtpType	string	The type of mobile OTP supported (e.g. `TOTP` and `HOTP`).
EmailActivityNotificationEnabled	boolean	Whether email activity notifications are enabled.
EnrollmentUniversalPromptEnabled	boolean	Whether enrollment universal prompt is enabled.
FraudEmail	string	The email address to receive fraud reports.
FraudEmailEnabled	boolean	Whether fraud email notifications are enabled.
GlobalSspPolicyEnforced	boolean	Whether global SSP (Security Settings Policy) is enforced.
HelpdeskBypass	string	The helpdesk bypass setting (e.g. `allow`, `deny`).
HelpdeskBypassExpiration	integer	The helpdesk bypass expiration time in seconds.
HelpdeskCanSendEnrollEmail	boolean	Whether helpdesk can send enrollment emails.
HelpdeskMessage	string	The helpdesk message displayed to users.

DuoAccountSummarys

Contains summary-level account metadata (a snapshot view of key account attributes and counts useful for reporting or inventory).

Name	Type	Description
ID	integer	Compyl-defined ID for the object. Not provided by the API.
AdminCount	integer	The current number of admins in the account.
Edition	string	The current edition (including trials) of the account.
IntegrationCount	integer	The current number of integrations in the account.
TelephonyCreditsRemaining	integer	The current total number of telephony credits available in the account. This is the sum of all types of telephony credits.
UserCount	integer	The current number of users in the account.
UserPendingDeletionCount	integer	The current number of users pending deletion from the account (seen in the Admin Panel's Trash view).

DuoAdminLogs

Captures administrative audit events (who changed what and when) for actions performed in the Duo admin environment.

Name	Type	Description
ID	integer	Compyl-defined ID for the object. Not provided by the API.
Action	string	The action performed (e.g. `user_update`, `admin_login_error`).
Description	string	String detailing what changed either as free-form text or serialized JSON.
IsoTimestamp	datetime	Response is an ISO 8601 formatted timestamp converted to a DateTime object.
Object	string	The object that was acted on. For example: `jsmith` (for users) `(555) 713-6275 x456` (for phones) or `HOTP 8-digit 123456` (for tokens).
Timestamp	datetime	Gets or sets the timestamp of the admin log event. Response is a Unix timestamp (in seconds) converted to a DateTime object.
Username	string	The full name of the administrator who performed the action in the Duo Admin Panel. If the action was performed with the API this will be `API`. Automatic actions like deletion of inactive users have `System` for the username. Changes synchronized from Directory Sync will have a username of the form (example) `AD Sync: name of directory.`

DuoAdminUnits

Represents administrative “units” or scoped partitions used to segment administration (so admins can be limited to specific groups of users, integrations, or other resources).

Name	Type	Description
AdminUnitID	string	The unique identifier for the administrative unit.
Description	string	The description of the administrative unit.
Name	string	The name of the administrative unit.
RestrictByGroups	boolean	Whether the administrative unit restricts access by groups.
RestrictByIntegrations	boolean	Whether the administrative unit restricts access by integrations.
Admins	List`<DuoAdminModel>`	Admins that are part of this unit. Note: this is not populated by the API Response but is a valid relationship to EF.

DuoAdmins

Lists Duo administrator identities, representing users who can manage Duo configuration and perform admin actions.

Name	Type	Description
AdminID	string	The unique identifier for the administrator.
Created	datetime	The Unix timestamp (in seconds) of when the administrator was created.
Email	string	The email address of the administrator.
LastDirectorySync	datetime	The Unix timestamp (in seconds) of the last directory sync for the administrator.
LastLogin	datetime	The Unix timestamp (in seconds) of the administrator's last login.
Name	string	The name of the administrator.
PasswordChangeRequired	boolean	Whether a password change is required for the administrator.
PhoneNumber	string	The phone number associated with the administrator.
RestrictedByAdminUnits	boolean	Whether the administrator is restricted by administrative units.
Role	string	The role of the administrator. Possible values: `Owner`, `Administrator`, `User Manager`, `Help Desk`, `Billing`, `Read-only`, `Phishing Manager`.
Status	string	The status of the administrator. Possible values: `active`, `disabled`.
Phones	List`<DuoPhoneModel>`	Navigation property (List`<DuoPhoneModel>`)
Tokens	List`<DuoTokenModel>`	Navigation property (List`<DuoTokenModel>`)
WebAuthCredentials	List`<DuoWebAuthCredentialModel>`	Navigation property (List`<DuoWebAuthCredentialModel>`)
AdminUnits	List`<DuoAdminUnitModel>`	Navigation property (List`<DuoAdminUnitModel>`)

DuoAuthLogs

Stores authentication events generated by Duo MFA (approvals/denials, factors used, timestamps, and related context) for monitoring and investigations.

Name	Type	Description
ID	integer	Compyl-defined ID for the object. Not provided by the API.
Alias	string	The alias associated with the authentication.
Email	string	The email address of the user who authenticated.
EventType	string	The type of event (e.g. `authentication`).
Factor	string	The authentication factor used (e.g. `duo_push`, `sms`, `phone` etc.).
IsoTimestamp	datetime	The ISO 8601 formatted timestamp of the authentication event.
Reason	string	The reason for the authentication result.
Result	string	The result of the authentication (e.g. `success`, `failure`, `fraud`, `error`).
Timestamp	datetime	The Unix timestamp (in seconds) of the authentication event.
TrustedEndpointStatus	string	The trusted endpoint status (e.g. `not trusted`, `trusted`).
Txid	string	The transaction ID for the authentication event.
AccessDeviceBrowser	string	The browser name from the access device (e.g. `Chrome`, `Firefox`, `Safari`).

DuoChildIntegrations

Tracks integrations that are linked beneath another integration or account context (useful when modeling hierarchical or delegated integration relationships).

Name	Type	Description
ChildIntegrationKey	string	The child integration key which uniquely identifies the child integration. Note: This is NOT the main Duo Integration Key
AdminApiAdmins	integer	Whether the integration has permission to manage administrators via the Admin API (1 = enabled 0 = disabled).
AdminApiAdminsRead	integer	Whether the integration has permission to read administrators via the Admin API (1 = enabled 0 = disabled).
AdminApiAllowToSetPermissions	integer	Whether the integration has permission to set Admin API permissions for other integrations (1 = enabled 0 = disabled).
AdminApiInfo	integer	Whether the integration has permission to retrieve account information via the Admin API (1 = enabled 0 = disabled).
AdminApiIntegrations	integer	Whether the integration has permission to manage integrations via the Admin API (1 = enabled 0 = disabled).
AdminApiReadLog	integer	Whether the integration has permission to read logs via the Admin API (1 = enabled 0 = disabled).
AdminApiReadResource	integer	Whether the integration has permission to read resources via the Admin API (1 = enabled 0 = disabled).
AdminApiSettings	integer	Whether the integration has permission to read and change global Duo account settings via the Admin API (1 = enabled 0 = disabled).
AdminApiWriteResource	integer	Whether the integration has permission to write resources via the Admin API (1 = enabled 0 = disabled).
FramelessAuthPromptEnabled	integer	Whether frameless authentication prompt is enabled (1 = enabled 0 = disabled).
Greeting	string	The greeting message displayed to users during authentication.

DuoDesktopAuthenticators

Holds records of desktop authenticator registrations/devices associated with users for MFA flows where desktop authenticators are used.

Name	Type	Description
DesktopAuthenticatorID	integer	The unique identifier for the desktop authenticator.
DesktopAuthenticatorKey	string	The key for the desktop authenticator. Note: this is from the Duo API this is not the table key.
DeviceName	string	The name of the device running the desktop authenticator.
DuoDesktopVersion	string	The version of Duo Desktop installed on the device.
OsFamily	string	The operating system family of the device. Possible values: `Windows`, `Mac`, `Linux`.
Users	List`<DuoUserModel>`	Users that are related to this DA. Note: this is not populated by the API Response but is a valid relationship to EF.

DuoGroups

Represents Duo groups used to organize users for policy assignment, access control, and administrative scoping.

Name	Type	Description
GroupID	string	The unique identifier for the group.
Name	string	The name of the group.
Description	string	The description of the group.
MobileOtpEnabled	boolean	Legacy parameter; no effect if specified and always returns false
PushEnabled	boolean	Whether push authentication is enabled for this group.
SmsEnabled	boolean	Whether SMS authentication is enabled for this group.
Status	string	The status of the group. Possible values: `active`, `bypass`, `disabled`.
VoiceEnabled	boolean	Whether voice authentication is enabled for this group.
Users	List`<DuoUserModel>`	Users that are related to this Group. Note: this is not populated by the API Response but is a valid relationship to EF.

DuoPhones

Stores enrolled phone/device records used as second-factor devices (for example, for Duo Push, SMS, or phone call verification).

Name	Type	Description
PhoneID	string	The unique identifier for the phone.
Activated	boolean	Whether the phone has been activated for Duo Mobile.
AppVersion	string	The version of the Duo Mobile app installed on the phone.
CapabilitiesSerialized	string	The serialized list of phone capabilities (e.g. `push`, `sms`, `phone`, `mobile_otp`).
CreationDate	datetime	The date when the phone was created.
Encrypted	string	The encryption status of the phone. Possible values: `encrypted`, `unencrypted`.
Extension	string	The phone extension if applicable.
Fingerprint	string	The device fingerprint for the phone.
LastActivatedDate	datetime	The date when the phone was last activated.
LastSeen	datetime	The date when the phone was last seen by Duo.
Model	string	The model of the phone device.
Name	string	The name assigned to the phone.

DuoTokens

Contains hardware token records (and related token metadata) used as authentication factors for Duo MFA.

Name	Type	Description
TokenID	string	The unique identifier for the hardware token.
Serial	string	The serial number of the hardware token.
Type	string	The type of hardware token. Possible values: `h6`, `h8`, `yubikey` etc.
Users	List`<DuoUserModel>`	Users that are related to this Token. Note: this is not populated by the API Response but is a valid relationship to EF.
Admins	List`<DuoAdminModel>`	Admins that are related to this Token. Note: this is not populated by the API Response but is a valid relationship to EF.

DuoUsers

Stores Duo user identities enrolled for MFA, including the user objects that factors (phones/tokens) attach to.

Name	Type	Description
UserID	string	The unique identifier for the user.
FirstName	string	The user's first name.
LastName	string	The user's last name.
Email	string	The email address of the user.
UserName	string	The username of the user.
AliasesSerialized	string	The serialized list of user aliases (alias1 through alias8).
Created	datetime	The Unix timestamp (in seconds) of when the user was created.
DateOfBirth	datetime	The user's date of birth.
DirectoryKey	string	The directory key if the user is synced from a directory.
EnableAutoPrompt	boolean	Whether automatic prompt is enabled for the user.
EntraFederatedUserID	string	The Entra (Azure AD) federated user ID if applicable.
ExternalID	string	The external ID of the user from the directory.

DuoWebAuthCredentials

Represents WebAuthn/FIDO2 credential registrations tied to users (passkeys/security keys) used for phishing-resistant authentication.

Name	Type	Description
WebAuthkey	string	The unique identifier (key) for the WebAuthn credential.
CredentialName	string	The name of the WebAuthn credential.
DateAdded	datetime	The Unix timestamp (in seconds) of when the credential was added.
DateLastUsed	datetime	The Unix timestamp (in seconds) of when the credential was last used.
Label	string	The label for the WebAuthn credential.
Users	List`<DuoUserModel>`	Users that are related to this WebAuthCredentials. Note: this is not populated by the API Response but is a valid relationship to EF.
Admins	List`<DuoAdminModel>`	Admins that are related to this WebAuthCredentials. Note: this is not populated by the API Response but is a valid relationship to EF.