Activation - DUO/Zero Trust - Secure Application Access with Phishing-Resistant MFA – Cisco Activation as a Service

Onboarding

Steps:

Step 1: Install Duo Mobile
- Task 1: Install Duo Mobile on your mobile device
- iOS
- Android
- Task 2: Scan the barcode to activate Verified Duo Push two-factor authentication for the admin account
- iOS
- Android
- Task 3: Setup a backup phone number to your Duo Admin account two-factor authentication for the admin account
- Link
Step 2: Log in for the first time to get started with Duo
- Task 4: Log in to the Duo Admin Panel
- Log In Here
- Link

Implement

Steps

Step 1: Create at least one additional owner account to prevent lockout
- Task 1: Add a second owner to prevent lockout your traffic is coming from
- Link
Step 2: Enroll initial test users in Duo
- Task 2: Create a domain group for the test user(s)
- Link
Step 3: Begin to enroll users in Duo
- Task 3: Create a communication plan for your end-users
- Link
- Task 4: Plan to enroll users
- Link
Step 4: Protect your pilot application with Duo
- Task 5: Review documentation for the desired application to understand the requirements and configuration steps
- Link
- Task 6: Configure and protect the application
- Link
- Task 7: Configure your appliance, device, application, service, or system to work with Duo
- Link
Step 5: Test your application with Duo
- Task 8: Create an application policy to test with your pilot group
- Link
- Task 9: Confirm user authentication into at least 1 application
- Link
- Link

Use

Steps

Step 1: Enroll additional users in Duo Authentication (MFA)
- Task 1: Enroll additional users in Duo
- Link
Step 2: Protect additional applications using Duo
- Task 2: Protect your appliance, device, application, service, or system with Duo
- View Cisco-Managed
Step 3: Review two-factor authentication methods
- Task 3: Configure one of the verification methods such as FIDO2 authenticators or Verified Duo Push
- Link
Step 4: Ensure users are actively authenticating into protected applications
- Task 4: Ensure frequently used or business critical apps are being protected
- Link
- Admin Login
- Task 5: Review the authentication summary log within the Duo Admin Panel to confirm that a majority of enrolled users have authenticated
- Link

Engage

Steps

Step 1: Enroll additional users in Duo
- Task 1: Enroll additional users in Duo
- Link
Step 2: Protect additional applications using Duo
- Task 2: Protect your appliance, device, application, service, or system with Duo
- Link
Step 3: Set up directory synchronization
- Task 3: Install the Duo Authentication Proxy application for Active Directory or OpenLDAP synchronization
- Link
- Task 4: Configure and confirm the authentication proxy is running
- Link
- Task 5: Configure directory and select groups to sync into Duo
- Link
Step 4: Review two-factor authentication methods
- Task 6: Configure one verification method
- Link
Step 5: Ensure users are actively authenticating into protected applications
- Task 7: Ensure users are actively authenticating into protected applications
- Link
- Task 8: Review the authentication summary log within the Duo Admin Panel to confirm that a majority of enrolled users have authenticated
- Link
Step 6: Encourage users to authenticate with stronger authentication factors
- Task 9: Configure Duo Push and Duo Mobile Inline
- Link
- Task 10: Configure Roaming Authenticators
- Link
- Task 11: Configure Passwordless and Web Authentication
- Link
- Task 12: Configure remembered devices
- Link

Adopt

Steps

Step 1: Enroll additional users in Duo
- Task 1: Enroll additional users in Duo
- Link
Step 2: Protect additional applications using Duo
- Task 2: Configure applications, services or systems that will be protected
- Link
- Log In Here
Step 3: Review two-factor authentication methods
- Task 3: Configure one verification method
- Link
Step 4: Encourage users to authenticate with stronger authentication factors
- Task 4: Configure Duo Push and Duo Mobile Inline
- Link
- Task 5: Configure Roaming Authenticators
- Link
- Task 6: Configure Passwordless and Web Authentication
- Link
- Task 7: Configure remembered devices
- Link

Related articles