Duo Security Auth API + OpenAI AI Access Checks (n8n)

Test Duo Security Auth API flows in n8n—plus an OpenAI AI agent that can check Duo preauth

This n8n template gives you five manual, testable scenarios for the Duo Security Auth API, including ping/check service verification, synchronous and asynchronous Duo Push authentication, logo retrieval, and an OpenAI-backed AI agent that calls Duo Security Tool (preauth) to assess whether a user is enrolled and allowed to authenticate.

What this workflow does

• 1) Manual scenario tester: Starts one of five scenarios from a manual trigger, so you can validate specific Duo behaviors on demand.
• 2) Duo availability + request signature validation: Uses the Duo Security Ping endpoint to check service availability, then verifies the request signature using the Check endpoint.
• 3) Synchronous authentication (Duo Push): Calls Duo preauth for a username, then sends a Duo Push authentication request and returns an approved/denied outcome based on Duo’s response.
• 4) Asynchronous authentication (polling): Runs Duo preauth, starts an async Duo Push, waits briefly, then polls authentication status until it’s no longer “waiting.”
• 5) Retrieve Duo logo: Fetches the stored Duo logo via the Duo Security Logo endpoint.
• 6) AI access checks with OpenAI: Sends a natural-language prompt to an AI agent backed by an OpenAI chat model. The agent uses the Duo Security Tool (preauth) to check enrollment/authorization and returns a short explanation.

Use cases

• Validate Duo Security Auth API connectivity and signature correctness before going live.
• Test Duo Push login flows in an n8n-based SaaS environment (sync and async).
• Build an internal “AI access check” experience using OpenAI + Duo preauth for enrollment/permission insights.

Technical details

• Nodes/logic: n8n-nodes-duoduo security, manual trigger, if, set, wait, sticky note.
• Duo endpoints/tools: Security Ping, Check endpoint, Duo preauth, Duo Push (sync/async), Security Logo.
• OpenAI integration: AI agent using an OpenAI chat model to perform Duo preauth checks.

Note: The authentication scenarios are designed for testing and send real Duo Push requests. Replace the example username (e.g., alice@example.com) with an enrolled test user.