Suspending Users from Office 365, Okta, or Duo

You may want to suspend a user if you notice suspicious activity around a user or their device. For example, if it is after normal working hours and you notice that the user's device is a target of attacks, you can suspend the user quickly to limit a hacker's access if the user is compromised.

You can suspend a user from the following applications, if applicable:

• Office 365
• Okta
• Duo

You can suspend a user through the All Tickets list on the Security Overview and the Alarms & Alerts page.

To suspend a user from Microsoft 365, Okta, or Duo

1. In Barracuda XDR Dashboard, click Intelligence, then one of the following:
   • Security Overview
   • Alarms & Alerts

   On the Security Overview, you may need to scroll to the bottom of the page. To focus the ticket list, you can create a filter.

   On the Alarms & Alerts page, to focus the ticket list, you can create a filter.

   
   

2. In the All Tickets section, click a ticket.

3. Click View Ticket Details.
4. In the Target User row, click Suspend User.
5. Enable any of the following check boxes:
   • Microsoft 365: revoke sessions and block sign-in
   • Okta
   • Duo
6. Click Submit.