Security & Privacy / Workforce Identity and Access Management (IAM) Software
Duo IAM is Cisco Duo's identity and access management platform for workforce MFA, passwordless authentication, SSO, directory services, device trust, and risk-based access.
Buying snapshot
A compact view of who this tool fits, what it costs, and what to confirm before choosing it.
Product scope
Cisco Duo workforce authentication and access management, with edition-specific directory, identity security and device controls.
Product checked: Oct 6, 2026
Pricing checked: Oct 6, 2026
Pricing plans
Pricing checked: Oct 6, 2026
Paid editions list USD 3, 6 and 9 per user/month. Self-service licenses use blocks of 10 below 100 users and 25 above 100 users. Cisco Commerce subscriptions use different term and payment arrangements; enterprise purchases above 2,500 users are directed to sales.
Official pricing pageVerified plan boundaries that can change the required edition.
More than 10 users or directory, SSO and passwordless access.
Supporting pricing evidenceIdentity threat detection, risk-based authentication or Duo Passport.
Supporting pricing evidenceVPN-less private-resource access and endpoint protection verification.
Supporting pricing evidenceAdjust the license quantity to compare public recurring rates across the available plans.
License-rate calculation only. It excludes implementation, migration, training, support, taxes, add-ons, usage charges, and negotiated discounts unless they are explicitly included in the displayed public rate.
Calculate additional usage only where the plan allowance, unit, and period are established. Published rates are shown separately when an estimate is not available.
$15.00 USD / 1,000 telephony credits
Published rate only. The plan allowance, matching unit, or billing period is not fully established, so extra cost cannot be calculated. An unknown allowance is not zero. Check the base subscription and any required products separately.
This calculation compares usage with the published allowance on the same unit and period basis. It excludes taxes, negotiated terms, and unverified packaging conditions.
Product scope
Material capabilities are separated by their verified relationship to the target product.
Advanced-edition entitlement; basic trusted endpoint checks are a separate capability.
Advanced-edition entitlement; basic trusted endpoint checks are a separate capability.
Free edition availability is not established by these edition descriptions.
Advanced-edition entitlement; basic trusted endpoint checks are a separate capability.
Lifecycle changes are enforced after the next source-directory sync.
Free edition availability is not established by these edition descriptions.
Advanced-edition entitlement; basic trusted endpoint checks are a separate capability.
Premier complete device trust; not equivalent to the lower-edition registration check.
Free edition availability is not established by these edition descriptions.
Advanced-edition entitlement; basic trusted endpoint checks are a separate capability.
Advanced-edition entitlement; basic trusted endpoint checks are a separate capability.
Free edition availability is not established by these edition descriptions.
Scoring method
The score uses the category-specific buying dimensions below and their displayed weights.
This page is based on public product information, official sources, structured feature data, and AI assessment. It is not a hands-on lab test unless explicitly stated. Confidence percentages describe our research indicators, not the probability that a claim is true or a measured accuracy rate.
Essentials and higher paid editions include SSO and passwordless authentication, while Free is an ongoing MFA edition for up to 10 users; buyers needing workforce SSO should confirm the paid-edition scope and enrollment count.
Advantage adds risk-based authentication and identity threat controls, and Premier adds private-resource access and endpoint checks; buyers should match those policy requirements to the appropriate edition.
Paid Duo Directory supports synchronization and SCIM lifecycle automation for users and groups, with outbound provisioning to supported applications; buyers should verify their target directories and application flows.
Advantage adds cross-platform visibility and identity threat monitoring, while the lower paid Essentials scope centers on core authentication and directory features; teams needing those monitoring controls should select and validate Advantage or Premier.
Paid Duo Directory connects to named directory services and SCIM-compliant applications, while sign-in and provisioning reliability still depends on the buyer's target flows; teams should test their directory and application connections before rollout.
Marketplace app signals
These source-reported ratings describe a specific marketplace listing, integration, mobile app, or add-on. They do not automatically represent the complete software product.
AI assessment
The assessments below use the same buying criteria. Review their scores, confidence, fit, cautions, and conclusions alongside the sources.
AI assessment updated: Oct 31, 2026
Duo IAM fits teams that want MFA, SSO and workforce directory workflows, with Advantage adding identity-threat monitoring and risk-based authentication and Premier adding VPN-less private-resource access. Duo Free is limited to MFA for up to 10 users; confirm edition, license-block sizing, telephony credits and Cisco Commerce terms for the intended deployment.
Research transparency
A compact record of the evidence used, what was not tested, and which conclusions still need verification.
Global Tool Radar generated this assessment from structured facts linked to public sources. No Global Tool Radar hands-on test is recorded in this page's research data. Any external hands-on assessment is identified separately and does not affect the Global Tool Radar score.
Conflict handlingUnresolved evidence is disclosed on the page; affected deterministic calculations and price schema are withheld when the conflict is blocking.
View research methodologySources checked
FAQ
No. Duo Directory can work alongside existing directories or act as the primary identity store.
Premier adds VPN-less access through Duo Network Gateway.
No. They consume telephony credits. Paid automatic-billing accounts receive 100 credits per user annually, excluding educational subscriptions. Additional packs are available.
No. Free is an ongoing edition limited to 10 users; the separate trial lasts 30 days.
Popular comparisons
Only high-scoring and nearby tools from the same subcategory are shown, avoiding comparisons between unrelated use cases.
Per-user pricing / Enterprise / Small business / Single sign-on and MFA
Per-user pricing / Single sign-on and MFA / Access lifecycle automation
Per-user pricing / Enterprise / Single sign-on and MFA / Access lifecycle automation