Duo Security MSP to MSP Subaccount Client Migration

This guide explains how to perform a Duo MSP-to-MSP subaccount migration—used when a customer’s Duo subaccount is moving from one MSP’s management to another.

🌟 Overview

An MSP-to-MSP migration enables the reassignment of a Duo subaccount from one MSP Console to another, without any service disruption to the client. This process is managed by Duo’s MSP Support team.

📤 Initiating the Migration

To begin the migration, send an email to msp@duo.com with the following information:

• ✅ 10-digit Account ID of the client’s Duo Admin Panel

• ✅ 10-digit Account ID of the outgoing (current) MSP Console

• ✅ 10-digit Account ID of the new MSP Console

Tip: To expedite processing, include an Owner-level admin from both the outgoing and new MSPs in the email CC list. If this is not possible, Duo will contact them separately.

📨 What Happens Next?

The Duo MSP team will issue reparenting requests to both the:

• Outgoing MSP Console

• Client subaccount's Duo Admin Panel

These requests must be approved by an admin with the Owner role on both ends.

🛠️ Approval Steps

🔁 Outgoing MSP (Current MSP) Approval

1. Login to the Duo MSP Console using an Owner-role account.

2. From the navigation menu, click Accounts, then click Accounts again.

3. Locate and click the linked subaccount name to switch into that subaccount’s Admin Panel.

4. Navigate to the Home page. A banner will appear regarding the reparenting request.

5. Click "View Details".

6. Click the blue "Approve Request" button.

🆕 New MSP Approval

1. Login to the Duo MSP Console using an Owner-role account.

2. Navigate to Accounts > Reparenting Requests.

3. Locate the pending reparenting request.

4. Click the blue "Approve Request" button.

Note: The request status will remain pending until both parties have approved.

✅ Final Confirmation

Once both parties have approved the request:

1. Send an email to msp@duo.com confirming the approvals.

2. Duo will finalize the reparenting on their end.

You’ll receive two confirmation emails:

• 📩 One to the outgoing MSP confirming deparenting of the client

• 📩 One to the new MSP confirming successful reparenting

🔒 No Service Interruption

• ✅ There are no changes to client configuration

• ✅ The client experiences no downtime

• ✅ All technical settings remain intact during and after the migration

For further assistance, reach out to the Duo MSP Support Team: msp@duo.com.