Skip navigation

Duo Federal

Protection at the highest level. Duo offers solutions that are FedRAMP Authorized at the FedRAMP Moderate Impact Level by the Department of Energy. Explore our two federal-specific editions designed to help public sector organizations reliably secure their most sensitive data and critical systems.

Fedramp logo.

Person on laptop with biometrics screen getting a successful message that they've authenticated using Duo MFA.

Explore Duo’s two federal editions

Duo offers two FedRAMP Authorized editions that deliver strong cloud-based authentication and device visibility tailored to the demands of public sector organizations. Duo Federal MFA and Duo Federal Access provide secure application access for federal agencies and other public sector customers to ensure only trusted users and trusted devices can access protected applications.

Federal MFA offers agencies federal-grade authentication, while Federal Access adds a stronger policy, which includes stronger role-based and location-based access policies, biometric authentication enforcement, the ability to allow or deny access based on device hygiene and notifying users to self-remediate out-of-date devices.

A closer look at Duo’s federal editions

Check out our documentation to dig deeper into how to use Duo Federal MFA and Duo Federal Access, as well as how they differ from Duo’s standard editions. Learn more

An icon image of a document and an eyeball looking at the document.

Pricing & Feature Overview


Duo Federal MFA

$3 / User / Month

Duo Federal Access

$6 / User / Month

  • End-to-end FIPS capable

  • Telephony removed

  • Consistent pricing

  • Easy to deploy AAL2 authenticators; supports AAL3 authenticators

  • Protect every application: on premises, cloud & hybrid

Contact Duo For More Information On Our
Federal Editions, and Try It For Yourself

* Required

Cisco would like to use your information above to provide you with the latest offers, promotions, and news regarding Cisco products and services. You can unsubscribe at any time. See Cisco's Online Privacy Statement for more information.

I am an MSP, IT Provider or Reseller.

By signing up I agree to the Terms and Services Privacy Policy.

Feature focus

End-to-end FIPS capable

Duo federal editions provide FIPS capable implementations from end-to-end for easy-to-use access control and authentication.

Telephony removed

Duo federal editions remove telephony authenticators to align with NIST SP 800-63-3b, which considers telephony “restricted authenticators.”

Consistent pricing

Duo federal editions cost the same as Duo standard editions: $3 per user for Federal MFA and $6 per user for Federal Access.

Easy to deploy AAL2 authenticators; supports AAL3 authenticators

Both Duo federal editions support Authentication Assurance Level 2 (AAL2) authenticators with Duo Push or Duo Mobile Passcode for both iOS and Android devices out of the box and by default with no additional configuration required. Duo also supports AAL3 authenticators, like U2F security keys (FIPS YubiKey from Yubico) and compatible HOTP keyfobs.

Protect every application: on-premises, cloud & hybrid

Duo’s federal editions protect on-premises, cloud and hybrid applications for all federal workloads and ensure device health - wherever you are in your cloud and IT modernization journey, Duo federal editions deliver the best defense.

Achieve federal compliance objectives

Duo Federal MFA and Federal Access editions are built in alignment with NIST 800-63-3 (Digital Identity Guidelines) and FedRAMP security controls to help your organization achieve federal and public sector compliant authentication and access control security objectives. Both editions provide end-to-end FIPS capable implementations and help organizations meet regulations such as:

various federal agency logos

various federal agency logos

Buying Duo: contracts & partners

Duo participates in many federal government contract vehicles, making it easy for public sector organizations to buy Duo Federal MFA and Duo Federal Access. Duo is also approved by the Department of Homeland Security (DHS) and is listed on the Continuous Diagnostics and Mitigation (CDM) Approved Product List (APL), which can be found on the General Services Administration’s (GSA’s) CDM website.