Duo checks the user, device, and network against an application's policy before allowing access to the application.

For example, you can require that Salesforce users complete two-factor authentication at every login, but only once every seven days when accessing Dropbox. Duo SSO prompts users for two-factor authentication and performs endpoint assessment and verification before permitting access to Dropbox.ĭuo Single Sign-On is available in Duo Beyond, Duo Access, and Duo MFA plans, which also include the ability to define policies that enforce unique controls for each individual SSO application.

Duo Single Sign-On acts as an identity provider (IdP), authenticating your users using existing on-premises Active Directory (AD) or another SSO IdP. In addition, as sensitive information makes its way to cloud-hosted services it is even more important to secure access by implementing two-factor authentication and zero-trust policies.ĭuo Single Sign-On is our cloud-hosted SSO product which layers Duo's strong authentication and flexible policy engine on top of Dropbox logins. If a user's primary password is compromised, attackers may be able to gain access to multiple resources.

While SSO is convenient for users, it presents new security challenges. Single sign-on (SSO) technologies seek to unify identities across systems and reduce the number of different credentials a user has to remember or input to gain access to resources.

Add two-factor authentication and flexible security policies to Dropbox SAML 2.0 logins with Duo Single-Sign On, our cloud-hosted SSO identity provider, offering inline self-service enrollment and authentication with Duo Universal Prompt.Īs business applications move from on-premises to cloud hosted solutions, users experience password fatigue due to disparate logons for different applications.

Dropbox login screen