Duo Security

Multi-factor authentication & single sign-on

Multi-Factor Authentication (MFA)

What is Multi-Factor Authentication (MFA)? MFA is a security access management solution that verifies a user's identity at login with two or more verification factors. By providing a layer of protection to a user or company’s data, MFA helps to prevent malware, phishing, and ransomware attacks. With Cisco Duo, MFA is easier than ever to integrate, implement, and use.

  • MFA Integration - Duo is highly scalable and can be easily integrated with most major apps and custom applications, enabling a secure access solution that can be implemented with minimal IT involvement.
  • Customized Set-Up - Duo multi-factor authentication offers a range of powerful authentication methods to choose from and combine, such as biometrics, tokens, passcodes, the Duo Push mobile app, and more.
  • User-Friendly Authentication - Implementing MFA is quick and easy for users with Duo's MFA mobile app. By streamlining the authentication process with easy verification from mobile devices, the Duo app not only reduces your total cost of ownership but also helps users adopt MFA with ease.

Device Trust

Identify risky devices, enforce contextual access policies, and report on device health using an agentless approach or by integrating with your device management tools.

  • Gain Device Visibility - Device trust begins when users log in to protected applications. Duo provides complete device visibility into both managed and unmanaged devices. With Duo, you can maintain an inventory of all trusted devices accessing corporate resources, identify at-risk devices, and gain a deeper understanding of your security environment.
  • Assess Device Health Posture - Enforce corporate device health policies, such as checking for OS version and patch level, password and firewall status, AV agent enabled, disk encryption, and management status. While non-compliant devices are blocked at the time of authentication, Duo empowers users with self-remediation to bring devices back into compliance with security policies—and no need to contact IT.
  • Continuously Verify Endpoint Trust - Device trust works by following the core principle of zero trust security: “Never trust, always verify.” Duo enables you to define trust for the endpoints accessing Duo-protected resources on your network, whether they’re company-issued and registered or unmanaged and unregistered personal devices, and allow or block access based on policy.

Adaptive Access Policies

With Duo, you can apply custom policies based on role, device, location, and additional contextual factors, ensuring control over who accesses what and when.

  • Automatically Respond to Change in Risk Signals - Strong authentication for dynamic environments. Respond to changes in risk signals with Duo’s Risk-Based Authentication.
  • Protect Specific Apps and Resources - Protect apps and network resources with the precision you need. Safeguard your critical assets with our powerful and granular secure access controls.
  • Fully Customize Security Policies - Achieve complete customization and control over your security measures with Duo's adaptive access policies. Personalize policies to help meet components of compliance and regulatory requirements.

Remote Access

Secure remote access refers to security solutions that enable a workforce to safely access an organization's applications and resources from outside the corporate network. Leading secure remote access solutions adapt to any tech setup, confirm user identities with MFA, and evaluate each login with device trust—whether your workforce is onsite, remote, or hybrid. By providing simple, trusted access to remote workers, Cisco Duo delivers world-class protection that frustrates attackers, not users.

  • Secure VPN-Less Remote Access for Any Environment - Duo Network Gateway is a secure proxy for on-premise and cloud environments (Azure, AWS, GCP, etc.), ensuring access security across your organization.
  • Security Controls for Every Application - The Duo Network Gateway, our secure remote access VPN-less proxy, ensures authorized access to applications. Enjoy streamlined user login, permission control, and reliable application security with Duo.
  • Flexible Options - Duo provides flexible options to accommodate your remote access strategy. Deploy a modern remote access solution and add an extra layer of protection to an existing VPN like Cisco AnyConnect, Juniper, Citrix, F5, and more.

Single Sign-On (SSO)

Single sign-on is a way of verifying a user’s identity to authorize access to multiple applications and websites with just a single set of login credentials. Duo SSO provides users with an easy and consistent login experience for every application — cloud or on-premises. Start your passwordless journey here with SSO.

  • Decreased Risk for Industry Compliance - SSO means users don’t have to remember multiple passwords, reducing the risks associated with credential compromise and breaches. With cyber insurance requiring multi-factor authentication (MFA), Duo has you covered for secure access for the workforce.
  • Simplified Access to Save Time and Cost - SSO provides simplified access for today’s hybrid work environment, allowing users easy access to all permitted apps in seconds. By reducing login credentials and offering self-service, Duo helps save time and cost for onboarding to applications, password resets, device management, and more.
  • SSO for a Passwordless Future - Planning for passwordless? SSO is an essential step in your journey! SSO dramatically reduces reliance on passwords from the start, and Duo Passwordless relies on SSO for secure authentication.