Duo Access Gateway (DAG) secures access to cloud applications by using existing user directory credentials, such as Microsoft Active Directory or Google Apps accounts.
DAG supports the Security Assertion Markup Language (SAML) 2.0 authentication standard, providing SAML connectors for enterprise apps like Google Apps, Amazon Web Services (AWS), Box, Salesforce and Microsoft Office 365.
Your identity provider (IdPs) handles primary authentication, and Duo provides secondary authentication. Duo supports a variety of IdPs, including Active Directory, OpenLDAP, Google OIDC, Azure OIDC and SAML IdPs.
Simplify the login process by letting your users log in only once in order to access all of their cloud applications. Duo’s Single Sign-On (SSO) gives you more control - letting you make custom, stricter access policies per cloud app, based on the type of user and device logging in.
Duo’s SSO feature checks the security health of your endpoints every single time they access your cloud apps - without an agent.
This complete security solution prevents modern attackers that often target multiple areas - including credential theft and the exploitation of known software vulnerabilities affecting outdated software versions.
“Duo gives us confidence that access to our cloud-based systems is controlled, locked-down, and verifiable.”
“Using Duo has added a seamless and consistent user experience for all of our SAML SSO cloud apps and our Pulse VPN.”