What is Duo?
Duo provides comprehensive, cloud-based identity security solutions designed to protect businesses of all sizes from unauthorized access and identity-related threats. Its platform focuses on verifying user identities and device health before granting access to applications, moving organizations towards a zero-trust security model. The system is built for ease of use, aiming to enhance security without hindering user productivity.
Key aspects of Duo's offering include robust multi-factor authentication (MFA) options, including phishing-resistant methods like FIDO2 and Verified Duo Push. It also features Single Sign-On (SSO) for streamlined access, adaptive access policies based on user context (role, location, device health), and device trust verification. Advanced tiers incorporate capabilities like risk-based authentication and threat detection powered by machine learning to dynamically respond to potential security risks.
Features
- Multi-Factor Authentication (MFA): Provides strong authentication methods including push notifications, biometrics, and phishing-resistant FIDO2 authenticators.
- Single Sign-On (SSO): Allows users to log in once to access multiple applications securely.
- Adaptive Access Policies: Enables customization of access permissions based on role, location, and device trustworthiness.
- Device Trust: Verifies the security posture and health status of devices attempting to access applications.
- Duo Passport: Streamlines authentication by minimizing interruptions on trusted devices.
- Cisco Identity Intelligence: Offers visibility into identity security posture and aids in rapid threat detection and response.
- Risk-Based Authentication: Dynamically adjusts authentication requirements based on real-time risk signals.
- Threat Detection: Uses machine learning (Duo Trust Monitor) to identify potential ongoing attacks.
- Passwordless Authentication: Supports login using Duo Mobile or FIDO2 authenticators without traditional passwords.
- Remote Access: Provides secure access to private resources without requiring a VPN (via Duo Network Gateway in Premier plan).
Use Cases
- Securing workforce access to applications
- Implementing multi-factor authentication across an organization
- Establishing a zero-trust security framework
- Preventing phishing attacks and credential theft
- Providing secure remote access for employees
- Streamlining user login experiences with SSO
- Enforcing device security policies
- Monitoring and responding to identity-based threats
