SleekView for Duo Universal Prompt: enrolment & failmode tables
The Duo Universal Prompt plugin stores per-user enrolment in wp_usermeta and policy (roles, failmode, host, integration key) in wp_options. SleekView reads both, joined to wp_users, so Duo coverage by role is finally one queryable table.
♾️ Lifetime License available
Audit Duo enrolment and role policy side by side
The Duo Universal Prompt plugin (maintained by Duo / Cisco) stores per-user enrolment hints in wp_usermeta under duo_auth_enrolled and related keys, and configuration (Duo API host, integration key, secret key reference, role policy, failmode) in wp_options under duoauth_ rows. The default admin focuses on policy: which roles are required to use Duo, which failmode applies if Duo is unreachable. Actual per-user enrolment lives behind the Duo Admin Panel, with WordPress only mirroring local hints.
SleekView reads the duo_auth_ user meta as columns joined to wp_users, alongside the role policy and failmode settings from wp_options. A single table shows user, role, whether the role is in scope for Duo enforcement, the current failmode, and the local enrolment hint. Sort by role to spot accounts in an enforced role with no local enrolment record, filter to inactive users that still have Duo coverage applied, or pull users created after the last policy change.
SleekView never replaces Duo's own Admin Panel, where actual enrolment lives. It surfaces the WordPress-side view of policy and per-user hints, so the security lead can audit coverage from inside the same admin they already use, with role-scoped saved views.
Workflow
From global policy to per-user coverage audit
Map duo user meta and options
duo_auth_ user meta as columns on wp_users, and duoauth_ options as a separate source for role policy and failmode.
Build the coverage view
Scope per role
wp_options stay locked to administrators.
Verify in Duo and re-check
Sample columns
A typical Duo Universal Prompt enrolment view
wp_usermeta (duo_auth_*) + wp_options (duoauth_*) + wp_users
| User | Role | Duo policy | Failmode | Local hint | Status |
|---|---|---|---|---|---|
| alex@studio.co | Administrator | Enforced | Closed | Enrolled | Covered |
| ria@design.io | Editor | Enforced | Closed | Unknown | Verify in Duo |
| tom@hello.dev | Author | Bypass | Open | — | Out of scope |
| mia@brew.coop | Subscriber | Not enforced | Open | — | No Duo |
Comparison
Default Duo Universal Prompt admin vs SleekView
Default Duo Universal Prompt
-
Role policy in
wp_optionsisn't joined to actual user rows in the WP admin - Failmode (open or closed) isn't visible per user, only as a global setting
- No native view of enforced roles vs actual user coverage
- Bypass users defined in policy aren't easy to audit against current roles
-
Local enrolment hints in
wp_usermetastay invisible to admins
SleekView
-
Joins
duo_auth_*user meta towp_usersas a real table -
Surfaces
duoauth_*role policy and failmode per user, not just as global options - Filter to enforced roles with no local enrolment hint to flag for Duo Admin Panel check
- Save views like 'Admins in enforced role, no enrolment hint' for the security lead
-
Scoped read-only views for support staff so Duo secrets stay in
wp_options
Features
What SleekView gives you for Duo Universal Prompt
Policy joined to users
Role policy from duoauth_roles and failmode from duoauth_failmode become per-row columns, not abstract global options. Coverage by role finally has a single screen.
Filter by role and enforcement
Combine role, Duo policy state, and local enrolment hint to find admins in an enforced role that don't have a local hint yet, then verify them in the Duo Admin Panel.
Read-only by design
Duo's Admin Panel remains the authoritative source for enrolment. SleekView only reads wp_usermeta and wp_options, so Duo secrets stay locked in WordPress config.
Audience
Who uses SleekView for Duo Universal Prompt
Security leads
Audit which administrators are in an enforced role but lack a local enrolment hint, then verify them in the Duo Admin Panel. The saved view becomes the rollout dashboard.
Support staff
Verify whether a user is in scope for Duo and which failmode applies if Duo is unreachable. No need to bounce between WP user profiles and the Duo console for a quick lookup.
Compliance reviewers
Export the slice of users in enforced roles to CSV with role, policy, and failmode preserved. A clean evidence file for SOC2 or ISO without hand-stitching screenshots.
The bigger picture
Why Duo coverage audits stay incomplete without a real table
Duo Universal Prompt makes the right architectural choice: keep authoritative enrolment in Duo's own service and only mirror policy on the WordPress side via wp_options and wp_usermeta. That keeps secrets out of WordPress but creates a familiar audit problem: WordPress shows policy globally and per-user hints locally, with no obvious view of role coverage. The moment a security lead asks 'which administrators are in an enforced role but don't have a local enrolment hint', the only way to answer is to read two screens at once and hold the join in your head.
SleekView joins the policy options to the user table and turns that question into a saved view. Support staff use a scoped version to verify scope for a user, while a security lead drives Duo Admin Panel checks from the same audit slice each cycle. Duo remains authoritative for enrolment and devices; SleekView just gives the WordPress-side data the table view it should have always had.
That closes the coverage gap without exposing any Duo credentials in the audit surface.
Questions
Common questions about SleekView for Duo Universal Prompt
No. Duo's Admin Panel remains the authoritative source for actual enrolment, devices, and bypass codes. SleekView only surfaces the WordPress side: per-user hints in wp_usermeta, role policy in wp_options, and failmode configuration. Enrolment changes still happen through Duo.
Yes. Role policy stored in duoauth_roles is exposed as a per-user column joined to wp_users, so a single view shows every user's role next to whether that role currently requires Duo.
No. Integration key, secret key, and API host stored in wp_options stay restricted to the plugin's own admin screens. SleekView only surfaces non-sensitive policy fields, not credentials.
Reads are the primary mode. Where the plugin exposes an action (for example, resetting a local hint), SleekView calls it via the plugin's own function. Actual enrolment and device management remain in the Duo Admin Panel.
Yes. Failmode is exposed as a column joined to every user. A view can filter to users in enforced roles where failmode is open, which is a known risk if Duo becomes unreachable.
Yes. Any filtered view exports to CSV with user, role, Duo policy, failmode, and local hint preserved. A practical evidence file for compliance reviews.
Yes. Saved views can be assigned per WP role, so support staff get a read-only verification view, while security leads get the full policy audit. Duo configuration writes remain administrator-only.
Yes. Duo configuration is per site, and SleekView respects the active scope. A network admin can compare role coverage across subsites, while subsite admins see only their own users.
Pricing
More than 1000+
happy customers
Explore our flexible licensing options tailored to your needs. Upgrade your license anytime to access more features, or opt for a lifetime license for ongoing value, including lifetime updates and lifetime support. Our hassle-free upgrade process ensures that our platform can grow with you, starting from whichever plan you choose.
Lifetime ♾️
Most popular
EUR
once
- Unlimited websites
- Lifetime updates
- Lifetime support
...or get the Bundle Deal
and save €250 🎁
The Bundle (unlimited sites)
Pay once, own it forever
Elevate your WordPress site with our exclusive plugin bundle that includes all of our premium plugins in one package. Enjoy lifetime updates and lifetime support. Save significantly compared to buying plugins individually.
What’s included
-
SleekAI
-
SleekByte
-
SleekMotion
-
SleekPixel
-
SleekRank
-
SleekView
€749
Continue to checkoutBrowse more
- Wcfm Delivery
- Woocommerce Shipment Tracking Pro
- Skubana Wp
- Stripe For Woocommerce
- Yith Subscriptions
- Woocommerce Currency Converter
- Payu Money Woocommerce
- Woocommerce Snapchat Pixel
- Yith Woocommerce Sales Countdown
- Surecart Subscriptions
- Woocommerce Sage Accounting
- Yith Woocommerce Zoom Magnifier
- Woocommerce Taxify
- Woocommerce Pdf Vouchers
- Woocommerce Extra Fees