This is an old revision of the document!
Add to the end of file /etc/sssd/sssd.conf the following lines
[pam] debug_level = 9
Logs are located into /var/log/sssd/, and also /var/log/secure
Add debug to /etc/pam.d/*
auth sufficient pam_duo.so debug
logs will be located into
*.debug /var/log/debug.log