Duoの始め方

Getting Started with Duo | Cisco Duo Skip navigation Search Support Admin Login Getting Started with Duo Last updated: April 16th, 2026 Duo’s identity and access management (IAM) solution offers strong user authentication options, secure application access, self-service user enrollment, and device management capabilities. With broad application support, Duo protects access to your organization's resources like VPN, email, web portals, cloud services, local operating system logins, etc. After successful primary authentication against the identity store of your choice, your users simply and securely complete multi-factor authentication using a platform authenticator like Touch ID or Windows Hello, a WebAuthn security key, or a request pushed to our Duo Mobile smartphone app. Users may also authenticate by answering a phone call or by entering a one-time passcode generated by the Duo Mobile app, a compatible hardware token, or received via SMS. Device policies verify that only the systems you trust can access your resources. Try Duo for Free With a free 30-day trial of our Duo Advantage plan , you can see for yourself how easy it is to get started with Duo's trusted access. Your Duo Advantage trial comes with most of the features and functionality of a paid Duo Advantage subscription like: Your choice of primary identity store, including hosting user identities in Duo Directory. Single Sign-On and Passwordless Risk-Based Authentication Identity Security with Cisco Identity Intelligence Full access to Duo's Auth API , Admin API , and Web SDK And more! What's Not Included in Trials New Duo customer accounts don't automatically receive voice telephony. That means you won't be able to use phone calls as a two-factor authentication method for both administrators and end users. Duo Push , SMS passcodes, security keys, and hardware tokens all remain available. You also won't be able to make these customizations: Changes to enrollment email text on the global "Settings" page or during bulk enrollment Changes to the text of the Duo Mobile activation email or SMS messages Changes to the SMS message prefix Setting a custom subdomain URL for Duo Single Sign-On Modifying the SSO Login Label custom branding in the global settings If you require telephony or customized email and SMS messaging as part of your Duo evaluation or subscription, please contact your Duo sales executive or Duo Support . During your 30-day Duo Advantage trial, you may choose to explore the Duo Premier edition instead. To convert your Duo Advantage trial to a Duo Premier trial, visit the "Billing" page in the Duo Admin Panel once you've logged in and click Try It Free under the Duo Premier plan description. When your Duo Advantage trial ends, your account switches to the Duo Free plan automatically. You can continue using your Duo Free plan for up to 10 users at no cost. Paid features you enabled during your trial no longer have any effect. If you convert this free account to a paid subscription, we'll restore the settings created during the trial. Guided Onboarding Duo commits to providing you with the best experience possible. We want to be sure you have what you need, whether that be guidance on how to use our product or knowing where to go for help. The Duo Admin Panel onboarding journeys guide you through enrollment, setup, deployment, optimization, and monitoring your security setup. To access guided onboarding: Log in to the Duo Admin Panel . Click on the Setup button at the top of your Duo dashboard. The Setup button directs you to the “Your Duo Setup” home page. The second-left navigation panel lists the onboarding journeys available to you. Each journey comprises multiple steps, shown as “Required” (default), “Optional”, “Caution”, or “Recommended”. You may skip “Caution”, “Optional”, and “Recommended” steps and, in some cases, may manually mark the “Complete”. Each journey guides you through a specific set of tasks to achieve important milestones in your Duo setup. Each task links you to the "Admin Panel" page where you can perform the action described. If there is not a specific page in the application that corresponds to the task, documentation links will be provided. Duo setup progress appears on the "Home" page. The journeys offered correspond with different parts of the product based on your Duo edition and the features implemented within your organization. Get Started with Duo Directory This journey guides you through basic setup steps for your Duo account. Add your first user and application. Add a test user or group. Enroll your pilot users in Duo. We provide several methods for enrollment. Some applications also support self-enrollment by users in the Duo Universal Prompt when they access the protected service. Your Duo administrator login can't also be used to log into the service or device now protected by a Duo application, so don't forget to enroll a Duo user account for yourself now, or complete user self-enrollment after you set up your first Duo application in the next step. Confirm password rules. (Recommended) Passwords are not required for new users by default. Review password rules in global enrollment policy if you plan to manage passwords with Duo’s directory. Mark this complete once you’ve reviewed your password rules. If you plan to host your users in Duo and want them to use passwords for authentication, configure the password options in your enrollment policy . Test authentication with Duo Central. (Optional) Duo Central is a cloud-hosted portal that your users can visit to get access to your organization's applications and links or perform self-service device management tasks. Visit the Duo Central configuration page in the Admin Panel to find your Duo Central URL. Test user enrollment and access by logging in as one of the pilot users you created earlier. You can customize the subdomain in your Duo Central URL later in your Duo Single Sign-On settings . Note that Duo plan trials may not create a custom subdomain URL . Add an SSO application. Decide which SAML or OIDC application you want to protect with Duo as a test. We recommend testing with a non-production application to start. Browse our SSO applications . Note: Effective June 30, 2023, Duo's cloud service no longer supports TLS 1.0 or 1.1 connections or insecure TLS/SSL cipher suites. If you are unsure how this may affect your Duo deployment plans, please see the Duo Knowledge Base article to TLS support for Duo applications and TLS 1.0 and 1.1 end of support for additional information. Check global policy. (Optional) This link will take you to the "Policies" page, where you can change default settings in the Global Policy, such as allowed authentication methods, or create new custom policies for application access and user management. Expand to other users and applications. (Optional) Sync your users . (Recommended) Duo’s new directory integrates with external IAM solutions to act as the orchestration and identity security layer for your security suite. Duo directory can segregate broker authentication for external directories and support SCIM integrations. If you are using an external user directory you can add it to Duo as a source for directory sync. Syncing your external directory will import users so you don't need to create them manually, and import groups that you can use to assign application access or target with custom policies. Once we detect two or more users or groups in your account, or you have set up the user directory sync selected in the “Tell us about your current setup” section, this step will automatically complete. Add more applications. This task will take you to the to the "Application Catalog" page so that you may repeat the setup steps with multiple applications. This is an optional step. Customize user schema. Optionally create custom user attributes to store more details on your users. Populate values for these custom attributes in Duo or import them from external directories. Support other identity providers. (Optional) Configure an SSO external authentication source . This step guides you in setting up an authentication source. You may skip this optional task. This task will auto-complete once you add either an Active Directory or SAML provider external authentication source. Skip this step if Duo is your exclusive identity provider. Otherwise, set up your existing IDP as an SSO authentication source. Set routing rules. Routing rules direct your users to the correct authentication source when you have multiple sources present in your SSO configuration. Configure rules that dictate which authentication source to use for different applications. You may skip this optional task. Offer self-service options. (Optional) Configure Self-Service Portal. This step takes you to the "Self-Service Portal" page which provides settings to enable users to access the portal as well as apply specific access policies to the portal application. This step auto-completes once you enable the portal for some or all users. Customize branding and enrollment email. (Recommended) This step will bring you to the "Custom Branding" section of the "Settings" page. From here you can set a logo, site colors, and an optional SSO login label. This step auto-completes once you set a custom logo. Note that Duo plan trials may not update some branding options. Onboard to Duo Directory Customers who signed up for Duo before June 23, 2025 see "Onboard to Duo Directory" instead of "Get Started with Duo Directory". Some steps may be marked complete if you previously configured the required settings. This journey describes the basic setup for migrating from your current identity provider (IdP) to your Duo Directory. Plan your migration to Duo Directory. Determine your user enrollment strategy. (Recommended) To control settings for all users and all applications, edit the Global Enrollment Policy . Note: Passwordless methods are already enabled by default in Duo Directory,