1. Log in to the Cisco Duo dashboard as the organizational owner.
   
   
2. In the left navigation pane, select Applications > Application Catalog. 
   
   
3. Use the search bar locate and Admin API. Select Add.
   
4. Admin API configuration:
   1. Details: Record the Integration Key, Secret Key and API hostname.
      
   2. Settings: 
      1. Permissions: Grant the following permissions.
      2. Network for API access: Add the network CIDR you wish to grant inbound access for API calls. This will be the outbound public IP of the Collector virtual machine. If nothing is specified, all inbound API access is allowed.
      3. Notes: Add any relevant notes.
   3. Select 'Save Changes' to complete.

3. Configure ARIA ADR Duo Connector

1. Log in to the APE Dashboard.
2. Navigate to Administration > Add-on Store, then search for Duo Log. 
   
   
3. Select Add Duo Log.
   
   
4. Fill in the required fields:
   1. Device: Duo Log.
   2. Name: Provide a friendly name (e.g. "Duo Security Logs").
   3. CCE Host: Enter the CCE IP Address. If unsure, check Administration > CCE Control.
   4. Access ID / User Name: Paste the Integration key.
   5. Password/Secret Key: Paste the  Secret Key.
   6. Config: Paste the following, replacing <API_HOSTNAME> with the API hostname.
      {"api_host": "<API_HOSTNAME>"}
5. Select Save.

4. Verify Duo Log Ingestion

1. Log in to the APE Dashboard.
2. Navigate to System > Log/Flow Collection Status.
3. If configured correctly, you will see an entry with your CCE IP with the Device Type of 'duo'.