To configure Cisco Duo Security MFA Server, do the following
Log in to the Duo Admin Panel.
In Duo Admin Panel, select Applications > Protect an Application.
Search Auth API in the applications list and click Protect.
The application generates an Integration key, Secret key, and API hostname. Copy this information to configure on SMA1000.
Choose Username normalization as Simple.
Review policy and other settings.
Click Save.
Go to SMA1000 AMC and configure authentication settings for Cisco Duo Security MFA server. See Configuring Cisco Duo Security MFA Server in SMA1000.