Pricing  Get Quote

Duo Security

ADSelfService Plus MFA with Duo Security

Every day, organizations are increasingly succumbing to cyberattacks. While your primary focus should be maintaining smart and secure passwords, you should also prioritize safeguarding user accounts. This can be done by implementing multi-factor authentication (MFA), which adds an extra layer of security to the existing username- and password-based authentication.

ADSelfService Plus supports 19 different authentication methods, including YubiKey, smart card, biometrics, Google Authenticator, Microsoft Authenticator, and Duo Security. Learn more about MFA.

What is Duo Security?

Duo Security is a cloud-based MFA vendor. It provides a set of authentication methods that can be used to secure logins to web applications, VPNs, and other cloud services. Duo's authentication methods include verifying users' identities with the help of something they know (a username, password, or OTP), something they possess (a device or security token), and something they are (biometrics). The possession factor includes sending OTPs or placing calls to users' devices like smartphones, PCs, or landlines.

Duo Security authentication with ADSelfService Plus

As an administrator, you can configure Duo Security as one of the MFA authenticators for users in your Active Directory domain to secure:

  • Machine logins for Windows, macOS, and Linux systems.
  • RDP logins.
  • Enterprise application logins through SSO.
  • OWA logins.

Duo Security

With ADSelfService Plus, you can either make Duo Security a mandatory MFA authenticator for users or allow them to bypass it and choose an alternative from the other authentication methods available. You can also enable Duo Security for users belonging to specific domains, OUs, and groups.

Once enabled, users will have to enroll with Duo Security for the authenticator to be enforced during MFA. Duo provides its own list of authentication methods from which users can choose a convenient method to verify their identities. The modes of authentication that Duo Security provides are:

Duo Security

  • A passcode sent via push notification to the Duo mobile app.
  • A passcode sent via SMS.
  • A call placed to any landline or mobile phone.
  • Security keys such as YubiKey or Feitian.
  • Apple Touch ID.

Upon successful enrollment, users will be able to authenticate themselves with the respective Duo Security authenticator and complete the required MFA process.

Significance of using Duo Security with ADSelfService Plus

ADSelfService Plus is an identity security solution that offers self-service password reset and account unlock, SSO, and MFA, amongst other features. Duo, on the other hand, offers MFA techniques to secure user access to resources. If your organization is AD-based and already has Duo's MFA techniques deployed, then read on to learn how ADSelfService Plus would benefit you.

ADSelfService Plus supports Duo Security as one of its authenticators. On switching to ADSelfService Plus, you not only get to continue using Duo's MFA methods and retain your users' MFA data, but you can also benefit from the other features that ADSelfService Plus offers. For instance, you can securely empower your users with self-service activities like password reset or change, account unlock, and directory updates. On doing so, you will undoubtedly witness a drastic reduction in the number of help desk tickets and the associated costs.

ADSelfService Plus supports 18 other MFA authentication methods besides Duo Security. If your organization has not deployed an MFA solution, there is no better and cheaper choice than ADSelfService Plus to help you secure SSO, machine, VPN, RDP, and OWA logons. In simpler terms, ADSelfService Plus makes effective use of Duo's authenticators and helps you reap added functional and cost benefits. Try ADSelfService Plus for free.

Benefits of using Duo Security in ADSelfService Plus

  • Protection against hacks: The default authentication technique of using only a password is gradually becoming obsolete due to advanced data breach techniques. MFA combats such attacks and protects your organization against breaches.

  • Simple configuration: Configuring Duo Security as an authentication factor for MFA can be done quickly with minimal steps.

  • Real-time audits: Every time a user attempts identity verification using MFA, the action is audited by ADSelfService Plus in the form of a report that includes information like time of access, the machine used, and whether or not the action was successful.

  • Assured security: Administrators can enable any one or all of the authentication methods for users during MFA for added security.

Leverage Duo Security to secure user identities using ADSelfService Plus.

Get Your Free Trial  

Password self-service

Free Active Directory users from attending lengthy help desk calls by allowing them to self-service their password resets/ account unlock tasks. Hassle-free password change for Active Directory users with ADSelfService Plus ‘Change Password’ console. 

One identity with Single sign-on

Get seamless one-click access to 100+ cloud applications. With enterprise single sign-on, users can access all their cloud applications with their Active Directory credentials. Thanks to ADSelfService Plus! 

Password/Account Expiry Notification

Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.

Password Synchronizer

Synchronize Windows Active Directory user password/account changes across multiple systems, automatically, including Office 365, G Suite, IBM iSeries and more. 

Password Policy Enforcer

Ensure strong user passwords that resist various hacking threats with ADSelfService Plus by enforcing Active Directory users to adhere to compliant passwords via displaying password complexity requirements.

Directory Self-UpdateCorporate Search

Portal that lets Active Directory users update their latest information and a quick search facility to scout for information about peers by using search keys, like contact number, of the personality being searched.


ADSelfService Plus trusted by