SSO
Edition not documented · Not documentedCloud-hosted SAML and OIDC sign-in with authentication policies for connected applications. Confirm app protocols, authentication sources and Duo subscription.
Checked 2026-09-16Product of Product vendor · United States
Cloud single sign-on included with commercial Duo Essentials, Advantage and Premier subscriptions.
Featured planSponsored companyTHE PRODUCT / THE PROOF
Each answer applies to the product scope shown. Conditions and unknowns stay visible; a listing plan never turns an unknown into “supported.”
Cloud-hosted SAML and OIDC sign-in with authentication policies for connected applications. Confirm app protocols, authentication sources and Duo subscription.
Checked 2026-09-16Cloud-hosted SAML and OIDC sign-in with authentication policies for connected applications. Confirm app protocols, authentication sources and Duo subscription.
Checked 2026-09-16Entra ID, Okta and Google Workspace can authenticate staff through external SAML sources. Multiple sources need routing rules. Scope is Duo SSO for connected applications, not administrator-panel login; commercial Essentials, not Federal.
Checked 2026-09-17Entra ID, Okta and Google Workspace can authenticate staff through external SAML sources. Multiple sources need routing rules. Scope is Duo SSO for connected applications, not administrator-panel login; commercial Essentials, not Federal.
Checked 2026-09-17Entra ID, Okta and Google Workspace can authenticate staff through external SAML sources. Multiple sources need routing rules. Scope is Duo SSO for connected applications, not administrator-panel login; commercial Essentials, not Federal.
Checked 2026-09-17The commercial Essentials plan includes cloud-hosted SSO for configured SAML and OIDC applications. Use Duo Directory or a supported external identity source, and configure routing rules when combining sources. This scope excludes Duo Federal and is separate from administrator-panel access.
Checked 2026-09-19Apply Duo authentication policies to federated workforce applications and enroll users in supported authenticators. Validate device compatibility, enrollment, remembered-device settings and account recovery. An available MFA method does not by itself establish phishing resistance or automatic user deprovisioning.
Duo SSO application authentication and second-factor policy ↗
Checked 2026-09-19Essentials supports FIDO2 passkeys and security keys for compatible SAML/OIDC applications using the browser-based Universal Prompt. Enforce the intended authenticator and review recovery and fallback. Duo Push is a separate passwordless option, not the FIDO2 evidence here. Windows OS Logon is a distinct deployment; external SAML IdPs need chaining and routing configuration.
Checked 2026-09-19BEFORE THE SALES CALL
Source-backed pricing for the scope shown. Confirm the final quote, taxes and terms with the vendor.
Cisco Duo Single Sign-On · Cloud service
$3 per user / month
Duo bundle price, including SSO. Self-service seats are sold in packs of 10 below 100 users and 25 above 100; confirm the 100-user boundary, billing term, currency and taxes.
Cisco Duo Single Sign-On · Cloud service
$6 per user / month
Duo bundle price, including SSO. Self-service seats are sold in packs of 10 below 100 users and 25 above 100; confirm the 100-user boundary, billing term, currency and taxes.
Cisco Duo Single Sign-On · Cloud service
$9 per user / month
Duo bundle price, including SSO. Self-service seats are sold in packs of 10 below 100 users and 25 above 100; confirm the 100-user boundary, billing term, currency and taxes.
About Cisco Security
Cisco sells firewalls, Umbrella DNS, Duo MFA, and Secure Access for enterprise networks.