Cisco Duo Blog
Product & Engineering
Get updates on Duo Security products & engineering innovations. Learn about access management & identity security advancements.
Why Active Directory is the identity problem CISOs cannot walk away from
CISO perspectives on why organizations are hardening Active Directory, closing visibility gaps, and extending MFA to legacy Kerberos and NTLM authentication paths.
SAML, OAuth, or OIDC: How to choose the right protocol
Application architecture, user types, and security trade-offs all shape your decision. Compare your options and find the best fit for your environment.
Why your Active Directory needs a modern security strategy
Identity leaders are rethinking directory strategy. Learn how adaptive authentication, device trust, and cloud identity protect your organization’s backbone.
Continuous identity security: secure every account and session
Attackers log in with stolen credentials. See how continuous identity security verifies trust at every session, not just at login.
Hanging Up on Telephony: How to move from SMS and phone to stronger MFA
A six-step migration plan for IT teams ready to retire vulnerable authentication, reduce help desk tickets, and meet modern security standards. Start today.
Passwordless for Microsoft 365 starts with federation
Federation lets you go passwordless for Microsoft 365 without migrating apps. See how Duo SSO replaces the password prompt with passkeys and Duo Push.
Your admins have too much privilege
Build admin roles that match your team's structure. Set permissions across users, devices, apps, and accounts—and apply least privilege where it matters most.
How Duo Directory automates user lifecycle management
Learn how Duo Directory, directory sync, and custom attributes help IT teams automate onboarding, offboarding, and access control.
How to build IdP failover with backup and split strategies
Your organization can't afford a single point of failure in identity. Explore backup and split IdP architectures to maintain authentication continuity.
Why single-IdP dependency is your biggest identity risk
Most organizations rely on a single Identity Provider for every access decision. Learn why IdP concentration risk is a critical vulnerability and how to assess your exposure.