Handling Duo ID Requests
When a Duo ID request is submitted, an approval operator reviews it and decides whether the Credential proceeds. You can review requests one at a time, or switch the approval dialog to Photo verification mode and process many at once by checking their photos. Photo verification suits the common case where only the photo needs a visual check, because the Credential data already comes from an external source.
Required roles: Administrator + Approver
You need an admin base role plus the Approver task role to open the approval dialog. The same access covers both review modes.
Before you start
Duo ID requests appear in the Duo ID requests queue of the Tenant that handles them. If your Card Template routes approvals to a delegated Tenant, requests appear in that Tenant's queue. See Approval Workflows for how routing is configured.
Open the approval dialog
- Open the Duo ID requests queue.
- Click Handle approval request. The approval dialog opens.
The dialog has a Review / Photo verification toggle. Review is the per-request flow, where you step through one request at a time. Photo verification shows the photo of every waiting request in a grid so you can process them together.
Approve a batch of photos
Use this when many requests are waiting and you only need to confirm the photos look correct.
- In the approval dialog, switch the toggle to Photo verification. The grid shows every waiting request's photo.
- Click the photos that look correct. To select everything, click Select all; to clear your selection, click Deselect all.
- Click Approve selected.
Breeze processes the selection one request at a time and shows a progress indicator. Each approved request leaves the grid as it completes. When the selection is empty, the batch finishes.
Reject a batch with a shared reason
Use this when several photos fail the check for the same reason — for example, the face is not clearly visible.
- In Photo verification mode, select the photos that should be rejected.
- Click Reject selected.
- Enter one rejection reason. It applies to every selected request.
- Choose whether to notify the recipients by email.
- Confirm the rejection.
Breeze rejects every selected request with the same reason and email choice, one at a time, with a progress indicator. If one request fails, the batch stops and the remaining selected requests stay selected so you can see what was left unhandled and retry.
Inspect a single request from the grid
When a photo looks borderline, open the full Credential before you decide.
- In Photo verification mode, click the view (eye) icon on a photo card.
- Review the full Credential details in the dialog that opens.
- Close the detail dialog.
- Approve or reject the request from the grid.
The full Credential opens in a read-only detail view without leaving Photo verification mode. After you close it, you continue working through the grid.
Notes and limits
- The approval dialog loads up to 50 requests at a time. When more than 50 are waiting, a warning appears. Work through them in pages, reloading the module between pages.
- The photo grid shows only requests in the waiting for approval state.
- The view toggle is disabled while a batch is running, so you cannot switch back to Review mid-operation.
- Requests without a photo still appear in the grid with a no photo placeholder, so none are skipped. You can still select them or open the full Credential to review.
- A batch rejection uses one shared reason for every request in the selection. There is no per-request reason in batch mode.
What's next?
- Approval Workflows (Card Templates) — configure Duo ID approval routing to a delegated Tenant.
- Duo ID Automatic Reminders — send reminder emails for pending Duo ID requests.
- Roles and Permissions — the
Approvertask role and admin base roles.