[ Cisco Duo Reviews ](https://www.g2.com/products/cisco-duo/reviews) [ Cisco Duo Reviews ](https://www.g2.com/products/cisco-duo/reviews) # Cisco Duo Features ##### ## Authentication Options (6) Authentication User experience Process of providing credentials and logging into multiple systems is easy and intuitive for users Supports Required Authentication systems Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc. Multi-Factor Authentication Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are. Supports Required Authentication Methods/Protocols Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case Federation/SAML support (idp) Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials. Federation/SAML support (sp) Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider. Show More ##### ## Access Control Types (5) Endpoint access Provides ability to control access to PC's, Mobile devices, and other endpoint devices. Local Access Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network. Remote Access Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network. Partner Access Controls access to users that are not company employees that are either within the companies local area network or outside the network Supports BYOD users Enables users to use their own device to access company applications. Show More ##### ## Administration (18) Ease of installation on server Installation process is easy and flexible. Password Policy Enforcement Options for resetting and enforcing password policies Administration Console Provides Administration tools/console that are easy to use and learn for routine maintenance tasks Ease of connecting applications Easily provisions new systems, platforms or applications using configuration and not customization. Self Service Password Administration Users can set, change passwords without interaction from IT staff Auditing Documents access and alterations of the database for analytics and reporting. Data Discovery Unveils data connected to infrastructure and applications used to help manage and maintain compliance within complex IT systems. Access Control Supports LDAP Protocol to enable access control and governance. Encryption Encrypts all data transfers using end-to-end encryption. Audit Trails Provides audit trails to monitor useage to reduce fraud. Regulatory Compliance Complies with regulations for strong customer authentication such as KYC, PSD2, and others. Bi-Directional Identity Synchronization Keep identity attributes consistent across applications whether the change is made in the provisioning system or the application. Policy Management Enables administrators to create access policies and applies policy controls throughout request and provisioning processes. Cloud Directory Provides or integrates with a cloud based directory option that contains all user names and attributes. Application Integrations Integrates with common applications such as service desk tools. Reporting and Monitoring Access pre-built and custom reports to monitor user activity and storage. Breadth of Partner Applications To what extent are there partner applications readily available for integrating into this product? Partner applications typically provide complementary, best of breed functionality not offered natively in this product. Auditing Documents access and alterations of the database for analytics and reporting. Show More ##### ## Platform (7) Multiple Operating system support Supports Endpoint access control to multiple operating systems Multi-Domain Support Allows user authentication to be honored by all the hosts in two or more domains Cross Browser support Support access to browser based applications across required browser types Fail over protection Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate Reporting Contains pre-built and custom reporting tools to required to manage business Auditing Provides mechanism for auditing authentication for trouble shooting purposes. Third Party Web Services support Can call and pass credentials to third party web services. Show More ##### ## Authentication type (8) SMS-Based Sends a one-time passcode (OTP) via SMS. Voice-Based Telephony Provides a one-time passcode (OTP) via voice-call. Email-Based Sends a one-time passcode (OTP) via email. Hardware Token-Based Supports hardware tokens, which are often USB-sized, fob-like devices that store codes. Software Token Offers software tokens, which are applications installed on a mobile phone, wearable devices, or desktops and generate time-based one-time passcodes (TOTP) that a user can easily copy. Software tokens work both online and offline. Biometric Factor Allows biometric factors such as fingerprints, faceprints, voiceprints, or other biometric information to be used as an authentication factor. Mobile-Push Offers mobile push authentication, which is a user-friendly method that does not require a user to copy a code, but rather accept or deny an authentication using a mobile application. Mobile push authentication only works when a user is connected to the internet. Risk-Based Authentication Analyzes users' IP addresses, devices, behaviors and identities to authenticate a user. Show More ##### ## Functionality (12) Multi-Device Sync Allows the use of tokens on multiple devices. This feature can also be turned off if the user does not want this. Backup Offers encrypted backup recovery stored by the vendor. FIDO2-compliant Offers FIDO2-enabled authentication method Works with hardware security keys Works with hardware security keys Multiple authentication methods Offer users multiple ways to authenticate including, but not limited to: mobile push on trusted devices, FIDO-enabled devices, physical security keys, keycards, smart watches, biometrics, QR codes, desktop app + pin, and others. Offline or no-phone solution Offers solutions when users are offline or do not have access to a mobile phone. User provisioning Simplifies or automates user provisioning, deprovisioning, and other user role changes. Password manager Offers password management tools to end users. Single Sign-on Offers single sign-on functionalities to end users, allowing them to authenticate once and be given access to all of their company accounts. Enforces policies Enforces user-access policies based on individual, role type, group membership or other factors to prevent unauthorized access to company systems and data. Authentication Authenticates users prior to granting access to company systems. Multi-factor authentication Offers multi-factor authentication methods to verify a user's identity. Show More ##### ## Network Management (4) Network Segmentation Allows administrative control over network components, mapping, and segmentation. Network Mapping Allows visual display of networks segmented components and their connected resources. Security Analytics Utilizes behavioral analysis to improve security procedures and documentation. API/Integrations Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications. Show More ##### ## Security (8) Security Automation Allows administrative control over automated security tasks. Application Security Protects application access and data. Prompts additional authentication for suspicious users. Workload Protection Protects computing resources across a network. Prompts additional authentication for suspicious users. Data Protection Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users. Encrypted Storage Provides some level of encryption of files and data in transit and sensitive information while it lives online. Anomoly Detection Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns. Data loss Prevention Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest. Policy Enforcement Allows administrators to set policies for security and data governance. Show More ##### ## Identity Management (3) Adaptive Access Control Provides a risk-based approcach to determining trust within the network. Identity Scoring Calculates risk based on user behavior, permissions, and requests. User Monitoring Monitors users attempting unauthorized access to databases, applicaitons, and othe network components. Show More ##### ## Data Protection (5) Data Masking Protects sensitive data by disguising or encrypting data, keeping it usable by the organization and approved parties. Data Encryption/Security Manages policies for user data access and data encryption. Data loss Prevention Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest. Anomoly Detection Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns. Sensitive Data Compliance Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards. Show More ##### ## Analysis (3) Cloud Gap Analytics Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols. Compliance Monitoring Monitors data quality and send alerts based on violations or misuse. User Analytics Allows for reporting and documentation of individual user behavior and privileges. Show More ##### ## Integration (4) Uses Open Standards Connections use open standards such as SAML or RADIS. Mobile SDK Offers developers a mobile software development kit to seamlessly add biometric authentication into their applications. Workforce Authentication Integrates with identity and access management (IAM) solutions to manage workforce authentication. Customer Authentication Integrates with customer identity and access management (ICAM) solutions to manage customer authentication. Show More ##### ## Access Control (4) User, Role, and Access Management Allows administrators to provision access based on the individual user and their role. Access Rights Defines which users have access to the different modules of the software and how. User Analytics Allows for reporting and documentation of individual user behavior and privileges. Compliance Monitoring Monitors data quality and send alerts based on violations or misuse. Show More ##### ## Type (2) On-premises solution Provides an IAM solution for on-prem systems. Cloud-solution Provides an IAM solution for cloud-based systems. Show More ##### ## Reporting (4) Tracking Tracks user activities across protected systems. Reporting Provides reporting functionality. Access & Permission Change Reporting Log and report all modifications to user roles and access rights. Compliance & Audit Trail Export Provide standardized reports for regulatory compliance and audits. Show More ##### ## Implementation (3) Easy Setup Offers an easy to understand user interface to make setup smooth. Mobile SDK Offers a mobile software development kit (SDK) for iOS, Blackberry, and Android. Web SDK Offers a software development kit (SDK) for web-based applications. Show More ##### ## Generative AI (2) AI Text Summarization Condenses long documents or text into a brief summary. AI Text Generation Allows users to generate text based on a text prompt. Show More ##### ## Identity and Access Management - Zero Trust Platforms (4) Single sign-on (SSO) Simplifies user authentication across multiple services while maintaining security. Multi-factor authentication (MFA) Ensures that users are verified through multiple credentials before access is granted, reducing the risk of compromised accounts. Role-based access control (RBAC) Grants access based on the user’s role within the organization, adhering to the principle of least privilege. Identity federation Integrates with external identity providers to manage user identities across different platforms and services. Show More ##### ## Security - Zero Trust Platforms (5) Encryption Mandatory encryption of data both at rest and in transit protects against unauthorized access. Endpoint detection and response (EDR) Continuous monitoring and real-time response capabilities with EDR help detect and mitigate threats on endpoint devices. Device posture assessment Verifies the security status of a device before granting access to network resources, ensuring that only compliant devices can connect. Micro-segmentation Divides the network into isolated segments to prevent lateral movement by attackers, ensuring that if one segment is compromised, others remain secure. Zero trust network access (ZTNA) Replaces traditional VPNs by enforcing granular, context-aware access to applications based on user identity, device, and other factors. Show More ##### ## Data Security - Zero Trust Platforms (2) Data loss prevention (DLP) Detect and prevent unauthorized access or transfer of sensitive data. Data classification Data classification automatically categorizes data based on its sensitivity, allowing for appropriate security measures to be applied Show More ##### ## Application Visibility - Zero Trust Platforms (5) API support API support ensures that the zero trust platform can integrate seamlessly with other security tools and existing infrastructure Application-level controls Provides the ability to enforce security policies at the application layer, ensuring that access to specific applications is tightly controlled. Secure application access ensures that only authorized users can access critical applications, protecting against unauthorized entry points User and entity behavior analytics (UEBA) UEBA identifies unusual behavior that may indicate a security threat, enabling proactive threat managemen Continuous monitoring Provides real-time visibility into all network traffic, user activities, and data flows to detect anomalies Show More ##### ## Reporting and Policies - Zero Trust Platforms (5) Policy automation allows for automatic application of security policies based on predefined criteria, reducing the risk of human error and ensuring consistent enforcement Regulatory compliance Regulatory compliance assists organizations in adhering to industry-specific regulations, such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), or the California Consumer Privacy Act (CCPA) Cross-platform compatibility This works across different environments, including on-premises, cloud, and hybrid setups, ensuring comprehensive security coverage Policy enforcement This ensures that security policies are consistently applied across all users, devices, and application Comprehensive reporting Detailed reports that provide insights into security events help organizations maintain compliance and optimize their security posture Show More ##### ## Agentic AI - Zero Trust Platforms (4) Autonomous Task Execution Capability to perform complex tasks without constant human input Cross-system Integration Works across multiple software systems or databases Adaptive Learning Improves performance based on feedback and experience Proactive Assistance Anticipates needs and offers suggestions without prompting Show More ##### ## Authentication & Authorization - Identity and Access Management (IAM) (1) Adaptive & Contextual Access Control Grant access based on user attributes, location, device posture or risk. Show More ##### ## Administration & Governance - Identity and Access Management (IAM) (2) Identity Lifecycle Management Automate onboarding, offboarding, and access reviews throughout user lifecycles. Self‑Service Account Management Enable users to reset passwords and update profiles without admin support. Show More ##### ## Generative AI - Identity and Access Management (IAM) (3) AI‑Driven Access Anomaly Detection Identify unusual access patterns using machine learning models. Automated Policy Tuning Dynamically adjust access policies based on risk and AI-generated insights. Predictive Role Recommendations Suggest appropriate user roles based on usage patterns and peer behavior. Show More ## Top-Rated Alternatives [ ![CyberArk Workforce Identity](https://images.g2crowd.com/uploads/product/hd_favicon/548522cbf741caa4a5261556f2f7b4e5/cyberark-workforce-identity.svg "CyberArk Workforce Identity") CyberArk Workforce Identity 4.5/5 (126) ](https://www.g2.com/products/cyberark-workforce-identity/reviews) [ ![LastPass](https://images.g2crowd.com/uploads/product/hd_favicon/9020c8120331d4c9d0995cb91a5b1f9d/lastpass.svg "LastPass") LastPass 4.5/5 (2,035) ](https://www.g2.com/products/lastpass/reviews) [ ![Microsoft Entra ID](https://images.g2crowd.com/uploads/product/hd_favicon/a8a99a96fda235658139f710592f8a53/microsoft-entra-id.svg "Microsoft Entra ID") Microsoft Entra ID 4.5/5 (872) ](https://www.g2.com/products/microsoft-entra-id/reviews) [ View All Alternatives ](https://www.g2.com/products/cisco-duo/competitors/alternatives) Cisco Duo Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_203d09ea298c17544716f2d59f6f1229/google-authenticator.jpg "Product Avatar Image") Google Authenticator 4.6/5 (582) [ Compare Now ](https://www.g2.com/compare/cisco-duo-vs-google-authenticator) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_6d0241f849d000763024744ff5901159/okta.png "Product Avatar Image") Okta 4.5/5 (1,252) [ Compare Now ](https://www.g2.com/compare/cisco-duo-vs-okta) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_2919348836c199f7026bd308512beb89/twilio-verify.png "Product Avatar Image") Twilio Verify 4.6/5 (68) [ Compare Now ](https://www.g2.com/compare/cisco-duo-vs-twilio-verify) ##### Categories on G2 [ Identity and Access Management (IAM) ](https://www.g2.com/categories/identity-and-access-management-iam)[ Single Sign-On (SSO) ](https://www.g2.com/categories/single-sign-on-sso)[ Multi-Factor Authentication (MFA) ](https://www.g2.com/categories/multi-factor-authentication-mfa) [ Cloud Data Security ](https://www.g2.com/categories/cloud-data-security)[ Passwordless Authentication ](https://www.g2.com/categories/passwordless-authentication)[ Biometric Authentication ](https://www.g2.com/categories/biometric-authentication)[ Zero Trust Networking ](https://www.g2.com/categories/zero-trust-networking)[ Risk-Based Authentication (RBA) ](https://www.g2.com/categories/risk-based-authentication-rba)[ Cloud File Security ](https://www.g2.com/categories/cloud-file-security)[ Zero Trust Platforms ](https://www.g2.com/categories/zero-trust-platforms) Show More ##### Explore More [ What are some email archiving solutions for financial services firms needing SEC and FINRA-compliant long-term retention? ](https://www.g2.com/discussions/what-are-some-email-archiving-solutions-for-financial-services-firms-needing-sec-and-finra-compliant-long-term-retention%20)[ Best text-to-image tools for rapid blog post thumbnail creation ](https://www.g2.com/discussions/best-text-to-image-tools-for-rapid-blog-post-thumbnail-creation)[ Best tools for integrating product catalogs with marketplaces ](https://www.g2.com/discussions/best-tools-for-integrating-product-catalogs-with-marketplaces) [ Where to find the best VoIP service for ecommerce business ](https://www.g2.com/discussions/where-to-find-the-best-voip-service-for-ecommerce-business)[ Best AI-powered agents for handling common customer queries ](https://www.g2.com/discussions/what-are-the-best-ai-powered-agents-for-handling-common-customer-queries)[ Pros and Cons Details ](https://www.g2.com/products/cisco-duo/reviews?qs=pros-and-cons) Show More [ What are some email archiving solutions for financial services firms needing SEC and FINRA-compliant long-term retention? ](https://www.g2.com/discussions/what-are-some-email-archiving-solutions-for-financial-services-firms-needing-sec-and-finra-compliant-long-term-retention%20)[ Best text-to-image tools for rapid blog post thumbnail creation ](https://www.g2.com/discussions/best-text-to-image-tools-for-rapid-blog-post-thumbnail-creation)[ Best tools for integrating product catalogs with marketplaces ](https://www.g2.com/discussions/best-tools-for-integrating-product-catalogs-with-marketplaces) [ Where to find the best VoIP service for ecommerce business ](https://www.g2.com/discussions/where-to-find-the-best-voip-service-for-ecommerce-business)[ Best AI-powered agents for handling common customer queries ](https://www.g2.com/discussions/what-are-the-best-ai-powered-agents-for-handling-common-customer-queries)[ Pros and Cons Details ](https://www.g2.com/products/cisco-duo/reviews?qs=pros-and-cons)