It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda XDR

Suspending Users from Office 365, Okta, or Duo

  • Last updated on

You may want to suspend a user if you notice suspicious activity around a user or their device. For example, if it is after normal working hours and you notice that the user's device is a target of attacks, you can suspend the user quickly to limit a hacker's access if the user is compromised.

You cannot remove a user suspension from within Barracuda XDR Dashboard. You have to remove a user's suspension from the application they were suspended from.

You can suspend a user from the following applications, if applicable:

  • Office 365
  • Okta
  • Duo

You can suspend a user through the All Tickets list on the Security Overview and the Alarms & Alerts page.

Suspend User.jpg

To suspend a user from Microsoft 365, Okta, or Duo
  1. In Barracuda XDR Dashboard, click Intelligence, then one of the following:
    • Security Overview
    • Alarms & Alerts

    On the Security Overview, you may need to scroll to the bottom of the page. To focus the ticket list, you can create a filter.

    On the Alarms & Alerts page, to focus the ticket list, you can create a filter.


  2. In the All Tickets section, click a ticket.

  3. Click View Ticket Details.
  4. In the Target User row, click Suspend User.
  5. Enable any of the following check boxes:
    • Microsoft 365: revoke sessions and block sign-in
    • Okta
    • Duo
  6. Click Submit.