Abdul Ateya
3 minute read
MSPs must secure on-premises, cloud, and server applications with MFA, while monitoring access and managing authentication for multiple clients. Current systems encourage shared user accounts for MSP employees to work on client applications, leaving poor traceability and scattered logs. If someone joins or leaves the firm, it's a hot mess. MSPs often must add users to every client tenant, leading to increased licensing costs and overhead that needs to be accounted for somewhere. Clients don’t like it, and swallowing unnecessary costs shouldn't be necessary.
How does Delegated Access work?
Delegated Access enables MSP employees who are set up as users on your Duo account to authenticate into customer applications on sub-accounts. Simply give the groups that your employees are part of access on the new Delegated Access page, and they can now authenticate into any application on sub-accounts. Set policy for MSP employee authentications in one spot and monitor authentications with full enrichment on the main account and on sub-accounts.
How can Delegated Access help?
Delegated Access is designed to fit in with your current workflows as an MSP.
Reduce overhead
With Delegated Access, you can reduce overhead costs by reducing the number of duplicate users you need to add to your client accounts. Just add one user to the main (parent) account, enable them for Delegated Access, and that user can access applications on sub-accounts.
Centralized security and monitoring
Delegated Access stops you from needing to worry about users sprawling across all of your sub-accounts. Enforce a more secure policy by configuring the application policy as you will. Delegated users will always complete MFA—no exceptions.
All Delegated Access authentication logs will be logged on the main account and on the sub-account, where the application authenticated into is present. In the event of needing to review those logs, you can find where your MSP technicians authenticated, when, and how, giving you great visibility.
Target use cases
You can use Delegated Access to allow MSP technicians to authenticate into any application protected by Duo MFA. You can use any of Duo’s over one hundred application integrations, or our generic integrations for browser- and API-based MFA insertion.
Learn more about Delegated Access
Learn more about how Duo MSP Delegated Access makes it easy to grow with Duo’s leading access management solution:
Already an MSP? Start using Delegated Access today and follow the guide on the Duo docs.
Learn about Duo’s program with the Duo MSP At-A-Glance.
Partnering with Duo MSP is as easy as 1, 2...not even 3
Duo’s MSP program helps you eliminate complexity and grow your business with industry-leading secure, scalable, and flexible access management.
The Duo MSP program makes it easy to:
Scale your business with pay-as-you-go pricing with no complex pricing tiers or minimums.
Securely authenticate into customer applications with Delegated Access.
Succeed with technical and marketing support from our team and access to an extensive documentation library and 50 NFR licenses.
Sign up on the Duo MSP page or reach out to msp@cisco.com to start your Duo MSP partnership today.
Duo offers a comprehensive identity and access management solution, with a user directory, SSO, phishing-resistant MFA, dynamic identity threat detection, strong, frictionless authentication, and device trust. With Delegated Access, MSPs gain the ability to simplify user management and licensing for their technicians, consolidate MSP employee logs into one spot, and can set strong policy on how an MSP tech can authenticate into customer applications.
Scale with less overhead, increased security, and more confidence. Adopting Delegated Access will allow you to put security and monitoring first, without sacrificing your business operations.