Cisco Duo vs. OneLogin by One Identity

Cisco Duois is well suited in all kinds of scenarios where you need to ensure proper security measurements, I think. We can't just rely on our passwords only, as they can be easily stolen through phishing or data breaches thus keeping multi factor authentication is quite essential. I always prefer MFA or at least 2FA for any critical system.

Incentivized

OneLogin definitely has a range of people it could work for. Everything from individuals who just want a better login process. Small companies who are wanting a way to keep a better count of who has access to what, and large corporations that want to implement a login process that will reduce the number of helpdesk tickets due to forgotten passwords.

Incentivized

• Speed - it's fast with almost no delay between triggering the MFA request and receiving the notification on an iPhone
• Security - in addition to the added MFA layer, a simple, 4-digit passcode can be added to the authentication request
• Ease of use - it doesn't scare users. It's simple to install, configure, and use.

Incentivized

• The application integration part is easy to deploy.
• The dashboard is good and user-friendly.
• The portal can be accessed from anywhere since we have gone to the cloud-based model.
• It provides a secure solution with certificate management that can restrict access from unauthorized apps.
• The technical support is good.

Incentivized

• Documentation is oftentimes missing key information for proper implementation. This is circumvented by reading third-party guides or contacting support for additional details.
• They do not push Fail-Closed as much as I think they should. Fail-Open is fairly trivial to bypass and it should be made known to the customer during setup how much this will affect overall security.
• More vendor integration is something that is always craved by administrators. There are so many third-parties to integrate with.

Incentivized

• Lack of administrative APIs for creating or setting up new connectors: This prevents the automated integration to federations and requires manual setup rather than discovery-based automated setup.
• Customization of the interface: The potential configuration of the interface are still limited at the moment (logo, primary and secondary colors, background). This prevents the usage of the platform as a communication medium or to organize the space in a more standard fashion (for our institution)
• There are some limitations with using the apps provisioning APIs that can lead to some termination or provisioning actions not being completed

Incentivized

There are a lot of competing solutions on the market; however, Duo "just works", and there is little to no learning curve for the new members to be acclimated to it. As long as that continues I see it as the preferred option moving forward

Incentivized

La interfaz es intuitiva y fácil de navegar, lo que permite a los usuarios administrar sus dispositivos y acceder a las políticas sin problemas. La integración con las aplicaciones SSO y SaaS facilita aún más el proceso de acceso, mejorando la experiencia del usuario.

Incentivized

OneLogin is very easy to use. The most complicated part is the user setup and even that is not difficult. After everything is working, using it day to day is trivial. All you have to do is have the application ready on your phone and you can use a single set of login credentials to access all of your tools securely.

Incentivized

In the last 5+ years we've been using Duo, there may have been 1 outage that impacted us. We do receive periodic notifications of issues but, for the most part, they impact carriers or functionality that we either don't use, or do not care about.

We do not see any degradation of performance of the protected applications. There are occasional lags in receiving the push but no show stooppers.

Since it’s a reputable company, I have received technical support when needed and I trust that if anything else happens I can contact them with any issues. I haven’t experienced bad customer service and I totally feel supported while using this authentication method. No complains so far and the high rating!

Incentivized

There has never been an issue where I have needed to use the OneLogin support so it would be unfair to rate them anything other than a 10 on their ability to provide support. Like I said its a very basic platform that we use it for with no issues.

Incentivized

There was no in person training but checking the box was the only way I could complete all of the questions.

This was not organized training but the videos that Duo provides to teach you how to install a particular integration are top notch.

Implementation was straight forward and you can isolate different scenarios in order to test new application setup or add to an existing setup. Gui interface is pretty easy to understand and follow. I had no experience with Duo and still manage to easily set up new policies and rules.

Incentivized

Ultimately we ended up going with Cisco Duo because we are a Cisco shop. All of our networking infrastructure, our phones, our wireless environment is Cisco based. It made logical sense to stay with a product that we already have a line of support with. With a smaller support / tech group we depend on outside Cisco support. That support is already here for us, so we stayed with a Cisco product.

Incentivized

When our company used to use RSA SecurID, we had physical security devices for the two-factor security pin. If we wanted to remotely access an account from an unsecured network, we had to carry around an extra physical tag. While this was very secure, it was not convenient and make working remotely unappealing. Additionally, we would have to manually enter the security pin to gain access. OneLogin fixes both these concerns and makes Single Sign On security very easy to use.

Incentivized

So far, the only limits we've encountered were tied to our imagination. Duo's strong list of supported integrations is amazing.

• It's one of those things that only costs money in the sense of you have to convince a leadership team to spend money to save money, right? Like a compromise is far more expensive than duo paying for duo. So specifically it's really just about trying to prevent problems. And so while it costs money and we don't have a direct return on investment that we can point out immediately, I would still always advocate for it just because it keeps security. Paying for security is cheaper than getting compromised essentially.

Incentivized

• The one big benefit would be time-saving. It is a very convenient platform.
• The access outside of the office also allows me to work at home or in my spare time for additional business that needs to be taken care of.

Incentivized