Documentation
Duo supports a wide range of devices and applications. See below for detailed documentation, installation, and configuration information.
Duo Premier Features | Duo Advantage Features | Duo Essentials Features
Administration | Remote Access & VPN | Microsoft | Web Applications | Identity Providers | Cloud Service Providers
Other Applications | Unix & SSH | SDK & API References | Guides & Policies
-
Introduction to Duo
- For End-Users See our Guide to Two-Factor Authentication Introduction to Duo
- Knowledge Base Troubleshooting tips and fixes Introduction to Duo
- Duo Care Learn about our premium customer support program Introduction to Duo
- Getting Started Get up and running with Duo Introduction to Duo
- Administration Overview Introduction to Duo's Admin Panel Introduction to Duo
- Protecting Applications Choose which services you'd like to protect Introduction to Duo
- Enrolling Users Adding users to Duo Introduction to Duo
-
Duo Premier Features
Duo Premier includes all Duo Advantage and Essentials features
- Duo Premier Overview A complete zero-trust security platform Duo Premier Features
- Duo Network Gateway Give users access to internal apps and hosts without a VPN Duo Premier Features
-
Duo Advantage Features
Duo Advantage includes all Duo Essentials features
- Duo Advantage Overview MFA with access policies and device visibility Duo Advantage Features
- Device Insight See information about devices authenticating to Duo Duo Advantage Features
- Endpoints Monitor end user access device vulnerability status. Duo Advantage Features
- Duo Desktop Verify that endpoints meet security requirements Duo Advantage Features
- Trust Monitor Detect anomalous access Duo Advantage Features
- Risk-Based Authentication Step-up authentication based on risk factors Duo Access Features
- Duo Passport Remember devices between browsers and client apps Duo Access Features
- Duo Identity Security Protect your identity perimeter with Duo Identity Security powered by Cisco Identity Intelligence Duo Access Features
-
Duo Essentials Features
- Duo Essentials Overview MFA for protected applications and SSO Duo Essentials Features
- Duo Single Sign-On Our hosted SSO identity provider solution Duo Essentials Features
- Duo Passwordless Access protected applications without a password Public Preview Features
- Verified Duo Push Reduce push fatigue and harassment with login verification codes Public Preview Features
- Trusted Endpoints Identify managed devices and block unknown device access Duo Premier Features
- Administrative Roles Assign management permissions to admins Duo Essentials Features
- Admin Single Sign-On (SSO) SAML login to the Duo Admin Panel Duo Essentials Features
- Administrative Units Delegated access to manage specific objects Duo Essentials Features
- Self-Service Portal Let your users manage their devices Duo Essentials Features
- Directory Sync Import existing admins, users, and groups from Active Directory, Microsoft Entra ID, or OpenLDAP Duo Essentials Features
- Device Management Portal Standalone interface for user self-service Duo Essentials Features
-
Administration
- Policy and Control Control how users authenticate to and access applications Duo Essentials Features
- Changing Settings Customizing your Duo experience Administration
- Managing Duo Users Maintain end users Administration
- Managing Duo Admins Maintain administrators Administration
- Managing Devices Administer phones, tokens, and other authenticators Administration
- Using Groups Use groups to assign status and manage access Administration
- Importing Users from CSV An alternative to self-enrollment or directory sync Administration
- Telephony Credits Overview and rate card Administration
- Accessibility Usability enhancements in Duo services Administration
- Release Notes Change logs for Duo software Reference
- Software Checksums and Downloads Reference
-
Remote Access & VPN
Duo Network Gateway
Give users access to internal apps and hosts without a VPN
Remote Access & VPN
- Cisco Remote Access & VPN
- Meraki RADIUS VPN Remote Access & VPN
- Akamai EAA Remote Access & VPN
- Juniper Remote Access & VPN
- Pulse Connect Secure Remote Access & VPN
- NetScaler Gateway Remote Access & VPN
- F5 BIG-IP Remote Access & VPN
- Palo Alto Remote Access & VPN
- Sophos UTM Remote Access & VPN
- Fortinet Remote Access & VPN
- Barracuda Remote Access & VPN
- Array Remote Access & VPN
- SonicWALL SRA SMA Remote Access & VPN
- OpenVPN Remote Access & VPN
- OpenVPN Access Server Remote Access & VPN
- NetMotion Mobility XE Remote Access & VPN
- CheckPoint Remote Access & VPN
- Other VPNs Try our RADIUS application Remote Access & VPN
- Authentication Proxy Overview This package connects your service to Duo Remote Access & VPN
- Authentication Proxy Reference guide Reference
-
Microsoft
- Microsoft Entra ID (Azure) Add Duo as an external MFA method for Entra ID EAM Microsoft
- Microsoft 365 Microsoft
- OWA Exchange Microsoft
- Windows Logon RDP Remote Desktop Microsoft
- AD FS Microsoft
- RDS RDWeb RDGateway Microsoft
- RRAS Microsoft
-
Web Applications
- Duo Web Use our SDK to protect any web application with Duo Web
- Wordpress Web
- Splunk Web
- LastPass Web
- 1Password Web
-
Identity Providers
- Duo Single Sign-On Our hosted SSO identity provider solution Duo Essentials Features
- Amazon AWS Directory Service Identity Providers
- CAS Identity Providers
- Cisco ISE Identity Providers
- OAM Identity Providers
- Okta Identity Providers
- OneLogin Identity Providers
- PingFederate Identity Providers
- SailPoint Identity Providers
- Shibboleth Identity Providers
-
Cloud Service Providers
- 1Password Cloud Service Providers
- Absolute Secure Access Cloud Service Providers
- Aha! Cloud Service Providers
- Akamai Control Center Cloud Service Providers
- Akamai EAA SSO Cloud Service Providers
- AWS IAM Identity Center Cloud Service Providers
- Amazon AppStream 2.0 Cloud Service Providers
- Amazon Connect Cloud Service Providers
- Amazon EMR Studio Cloud Service Providers
- Amazon Managed Grafana Cloud Service Providers
- Amazon WorkSpaces Cloud Service Providers
- AWS Client VPN Cloud Service Providers
- AWS Cognito Cloud Service Providers
- AWS Redshift Cloud Service Providers
- AWS Verified Access Cloud Service Providers
- Apigee X Cloud Service Providers
- Asana Cloud Service Providers
- Atlassian Cloud - Jira and Confluence Cloud Service Providers
- Auth0 Cloud Service Providers
- Autodesk Cloud Service Providers
- Auvik Cloud Service Providers
- BambooHR Cloud Service Providers
- Barracuda WAF Cloud Service Providers
- BeyondTrust Cloud Service Providers
- Bitdefender Cloud Service Providers
- Bitwarden Cloud Service Providers
- BloodHound Community Edition Cloud Service Providers
- BloodHound Enterprise Cloud Service Providers
- BlueJeans Cloud Service Providers
- Blumira Cloud Service Providers
- Bonusly Cloud Service Providers
- Box Cloud Service Providers
- BugSnag Cloud Service Providers
- Businessmap Cloud Service Providers
- Checkmk Cloud Service Providers
- Cirrus Identity Cloud Service Providers
- Cisco ASA Cloud Service Providers
- Cisco Firepower Cloud Service Providers
- Cisco ISE Admin Logins Cloud Service Providers
- Cisco Secure Email Cloud Service Providers
- Cisco Security Cloud Sign On Cloud Service Providers
- Cisco Umbrella Dashboard Cloud Service Providers
- Cisco Umbrella End Users Cloud Service Providers
- Cisco Unified Communications Manager Cloud Service Providers
- NetScaler Remote Access & VPN
- Citrix Workspace Cloud Service Providers
- Clever Cloud Service Providers
- ClickUp Cloud Service Providers
- Cloudflare Cloud Service Providers
- Cisco CloudLock Cloud Service Providers
- Cohesity Cloud Service Providers
- Commvault Complete Backup & Recovery Cloud Service Providers
- ConnectWise Home Cloud Service Providers
- ConnectWise ScreenConnect Cloud Service Providers
- CrashPlan Cloud Service Providers
- CyberArk Privileged Access Cloud Service Providers
- CyberArk Workforce Identity Cloud Service Providers
- Cyolo Cloud Service Providers
- Dashlane Cloud Service Providers
- Datadog Cloud Service Providers
- Datto File Protection Cloud Service Providers
- Datto Workplace Cloud Service Providers
- Delinea Secret Server Cloud Service Providers
- DigiCert Cloud Service Providers
- DNSFilter Cloud Service Providers
- DocuSign Cloud Service Providers
- Domotz Cloud Service Providers
- Drip Cloud Service Providers
- Dropbox Cloud Service Providers
- Drupal Cloud Service Providers
- Dynatrace Cloud Service Providers
- Egnyte Cloud Service Providers
- Elastic Cloud Service Providers
- Emburse Certify Cloud Service Providers
- Epic Mobile Apps Cloud Service Providers
- Expensify Cloud Service Providers
- Formstack Cloud Service Providers
- Fortinet Fortigate Cloud Service Providers
- Freedcamp Cloud Service Providers
- Freshdesk Cloud Service Providers
- Freshworks Cloud Service Providers
- GitHub Enterprise Cloud Service Providers
- GitLab SaaS Cloud Service Providers
- GitLab Self-Managed Cloud Service Providers
- Globalscape EFT Cloud Service Providers
- GoTo Apps Cloud Service Providers
- Graylog Cloud Service Providers
- Grafana Cloud Cloud Service Providers
- Grafana Enterprise Cloud Service Providers
- Google Workspace Cloud Service Providers
- HackerOne Cloud Service Providers
- HackerRank Cloud Service Providers
- HashiCorp Cloud Cloud Service Providers
- Heroku Cloud Service Providers
- HPE Greenlake Cloud Service Providers
- Hootsuite Cloud Service Providers
- Hubspot Cloud Service Providers
- Huntress Cloud Service Providers
- IBM QRadar Cloud Service Providers
- IBMid Cloud Service Providers
- Igloo Cloud Service Providers
- Islando Cloud Service Providers
- IT Glue Cloud Service Providers
- Ivanti Cherwell Service Management Cloud Service Providers
- Ivanti Connect Secure Cloud Service Providers
- JAMF Pro Cloud Service Providers
- Jitbit Cloud Service Providers
- Kandji Cloud Service Providers
- Keeper Security Cloud Service Providers
- Kentik Cloud Service Providers
- Klaviyo Cloud Service Providers
- KnowBe4 Cloud Service Providers
- Legalesign Cloud Service Providers
- Lever Cloud Service Providers
- Liongard Cloud Service Providers
- Looker Cloud Service Providers
- Lucid Cloud Service Providers
- ManageEngine Access Manager Plus Cloud Service Providers
- ManageEngine ADAudit Plus Cloud Service Providers
- ManageEngine ADManager Plus Cloud Service Providers
- ManageEngine ADSelf Service Plus Cloud Service Providers
- ManageEngine AD360 Cloud Service Providers
- ManageEngine AppCreator Cloud Service Providers
- ManageEngine Application Control Plus Cloud Service Providers
- ManageEngine Applications Manager Cloud Service Providers
- ManageEngine Asset Explorer Cloud Service Providers
- ManageEngine Endpoint Central Cloud Service Providers
- ManageEngine Key Manager Plus Cloud Service Providers
- ManageEngine OpManager Cloud Service Providers
- ManageEngine PAM360 Cloud Service Providers
- ManageEngine Password Manager Pro Cloud Service Providers
- ManageEngine Patch Manager Plus Cloud Service Providers
- ManageEngine Patch Manager Plus Cloud Cloud Service Providers
- ManageEngine Remote Access Plus Cloud Service Providers
- ManageEngine Remote Access Plus Cloud Cloud Service Providers
- ManageEngine ServiceDesk Plus Cloud Service Providers
- ManageEngine SupportCenter Plus Cloud Service Providers
- ManageEngine Vulnerability Manager Plus Cloud Service Providers
- Meraki Dashboard Cloud Service Providers
- Meraki Secure Client Cloud Service Providers
- Microsoft 365 Cloud Service Providers
- Miro Cloud Service Providers
- Monday Cloud Service Providers
- NetApp BlueXP Cloud Service Providers
- NetApp ONTAP Cloud Service Providers
- NetDocuments Cloud Service Providers
- Netskope Admin Console Cloud Service Providers
- New Relic Cloud Service Providers
- Nifty Cloud Service Providers
- NinjaOne Cloud Service Providers
- Notion Cloud Service Providers
- Nutanix Cloud Cloud Service Providers
- OpenText ALM Octane Cloud Service Providers
- OpenText Operations Bridge Integration Hub Cloud Service Providers
- PagerDuty Cloud Service Providers
- Palo Alto Networks Cloud Service Providers
- Palo Alto Prisma Cloud Service Providers
- Panther Cloud Service Providers
- Ping Identity Cloud Service Providers
- Pipedrive Cloud Service Providers
- Planview AdaptiveWork (formerly Clarizen) Cloud Service Providers
- Plixer Scrutinizer Cloud Service Providers
- Procore Cloud Service Providers
- Productboard Cloud Service Providers
- ProjectManager Cloud Service Providers
- Quest Foglight Cloud Service Providers
- Rapid7 Cloud Service Providers
- Red Hat Keycloak Cloud Service Providers
- Remedyforce Cloud Service Providers
- Ringcentral Cloud Service Providers
- Rubrik Security Cloud Cloud Service Providers
- SailPoint IdentityIQ Cloud Service Providers
- SailPoint IdentityNow Cloud Service Providers
- Salesforce Cloud Service Providers
- ServiceNow Cloud Service Providers
- SAP BTP Cockpit Cloud Service Providers
- SAP Concur Cloud Service Providers
- SAP HANA, express edition Cloud Service Providers
- Sauce Labs Cloud Service Providers
- Secured Signing Cloud Service Providers
- Sensu Go Cloud Service Providers
- SentinelOne Cloud Service Providers
- ShareFile Cloud Service Providers
- Signal Sciences Cloud Service Providers
- Singlewire InformaCast Cloud Service Providers
- Slack Cloud Service Providers
- Smartsheet Cloud Service Providers
- Snowflake Cloud Service Providers
- SolarWinds Platform Cloud Service Providers
- SolarWinds Service Desk Cloud Service Providers
- SonicWALL SMA 200 Series Cloud Service Providers
- Splunk Cloud Service Providers
- Sumo Logic Cloud Service Providers
- Syncplicity Cloud Service Providers
- Tableau Cloud Service Providers
- Tableau Server Cloud Service Providers
- TalentLMS Cloud Service Providers
- Tempo Portfolio Manager Cloud Service Providers
- Tenable Cloud Service Providers
- Terraform Cloud Cloud Service Providers
- ThousandEyes Cloud Service Providers
- Trend Vision One Cloud Service Providers
- Udemy Cloud Service Providers
- UserVoice Cloud Service Providers
- Veeam Backup Enterprise Manager Cloud Service Providers
- Verkada Cloud Service Providers
- WebEx Cloud Service Providers
- Workday Cloud Service Providers
- Workplace from Meta Cloud Service Providers
- WP Engine Cloud Service Providers
- YubiEnterprise Delivery Cloud Service Providers
- Zabbix Cloud Service Providers
- Zendesk Cloud Service Providers
- Zerto Cloud Service Providers
- Zoho Cloud Service Providers
- Zoho Billing Cloud Service Providers
- Zoho Bookings Cloud Service Providers
- Zoho Books Cloud Service Providers
- Zoho Cliq Cloud Service Providers
- Zoho CRM Cloud Service Providers
- Zoho Desk Cloud Service Providers
- Zoho Directory Cloud Service Providers
- Zoho Expense Cloud Service Providers
- Zoho Forms Cloud Service Providers
- Zoho Invoice Cloud Service Providers
- Zoho Meeting Cloud Service Providers
- Zoho One Cloud Service Providers
- Zoho People Cloud Service Providers
- Zoho Projects Cloud Service Providers
- Zoho Sign Cloud Service Providers
- Zoho Sites Cloud Service Providers
- Zoho Wiki Cloud Service Providers
- Zoho WorkDrive Cloud Service Providers
- Zoom Cloud Service Providers
- Other SAML Service Providers Try our Duo SSO Generic SAML application Cloud Service Providers
- Other OIDC Relying Parties Try our Generic OIDC Relying Party application Cloud Service Providers
-
Other Applications
- macOS Other Applications
- Epic Other Applications
- Cisco SecureX Other Applications
- AWS Amazon WorkSpaces Other Applications
- PeopleSoft Other Applications
- Juniper UAC Other Applications
- VMware View Other Applications
- Bomgar Other Applications
- CyberArk Privileged Account Security Other Applications
- Delinea Secret Server Other Applications
- LDAP Two-factor for LDAP logins Other Applications
- Other Devices Try our RADIUS application Other Applications
- Authentication Proxy Overview This package connects your service to Duo Other Applications
- Authentication Proxy Reference guide Reference
- Duo Splunk Connector Pull Duo logs in to Splunk with an open-source utility API
- Duo Ready Partner List Learn more about integrations created by our partners Other Applications
-
Unix & SSH
- Duo Unix Unix & SSH
-
SDK & API References
- Duo Security on GitHub Duo API clients and Web SDK resources API
- Duo Web Use our SDK to protect any web application with Duo API
- OIDC-based Auth API OIDC standards-based Duo 2FA for web applications API
- Auth API REST API for protecting logins on web & mobile API
- Admin API REST API for performing administrative functions API
- Device API REST API for managing trusted device identifiers API
-
Guides & Policies
- Duo End of Sale, End of Support, and End of Life Policy Guides
- Duo Liftoff Guide Plan a successful Duo deployment Guides
- Help Desk Guide Information for user-facing support staff Guides
- Business Continuity Guide Managing service outages Guides
- Promoting Duo Push with Users Encourage push notification usage Guides
- Duo Travel Guide Tips for staying secure and connected Guides
- Duo Policy Guide Supplemental guidance for Duo Policies Guides
The documentation set for this product strives to use bias-free language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language used by a referenced third-party product. Learn more about Inclusive Language at Cisco.