NET+ Duo offering
Internet2 member and non-member higher education schools can subscribe to the community developed and validated NET+ Duo program.
Duo Security, now part of Cisco, is the leading provider of Trusted Access security and multi-factor authentication. Duo's zero-trust security platform, Duo Beyond, enables organizations to provide trusted access to all of their critical applications - for any user, from anywhere, and with any device. Duo is a trusted partner to more than 14,000 customers globally. Through the custom-developed, affordable Internet2 Duo program, colleges and universities can offer school-sponsored two-factor authentication to every person on campus.
NET+ Duo Advisory Board
We also have a NET+ Duo Advisory Board providing oversight of the NET+ Duo program. The current campuses on the advisory board are:
Brown University, Indiana University, New York University, Northwestern University, Old Dominion University, Pennsylvania State University, and University of Maryland Baltimore County.
If you would like to contact the advisory board, they can be reached at:
Duo features are laid out in their pricing website where they go over the different products and features included in each version. More details on each product can be found here. Duo has engaged deeply with the higher education community and developed several integrations that are needed by campuses.
Duo for Shibboleth Identity Provider v3: https://duo.com/docs/shibboleth
Central Authentication Server (CAS): https://duo.com/docs/cas
Duo also has integrations for authentication for many of the other NET+ service providers including:
Cisco Cloudlock: https://duo.com/docs/cloudlock
Plus, an integration with Splunk around getting Duo logs into a campus Splunk environment:
Telephone: +1 (866) 760-4247
Licensing and Pricing
I'd like to take Duo for a test drive before signing up for a site-wide license. How can I do that?
Do I need to be an InCommon participant to sign up for Duo?
Do I have to be a member of Internet2 to participate in the Duo program?
Only part of our campus wants Duo. Can we license just a subset of our campus community?
The fee in each case will vary with the size (based on IPEDS student count) of your school and the number of users your campus wants to enroll in the service.
The Duo rate card talks about "telephony credits." What are those?
Duo also supports two-factor login via other methods, such as automated voice calls or SMS messages. Duo incurs a small marginal cost when an automated voice call is made (long distance telephone charges) or an SMS message needs to be sent (SMS charges), with the exact amount depending on the source and destination of the call or message. Telephony credits are the way that Duo ensures those marginal costs don't get out of control. Telephony credits are purchased in advance as a non-expiring credit in a pool that covers all user accounts at a site. In the United States, voice calls for login confirmation incur a two (2) credit charge; SMS messages for login confirmation cost one (1) credit in the US. Rate cards for other countries are available.
Telephony credits are purchased directly from Duo after you have enrolled in the program.
What is a staff person for licensing?
What is the Duo Security Platform Edition?
What is the Duo Security Beyond Edition?
How do I license my hospital for Duo Security?
What happened to Campus Associates?
What's the difference between Duo Mobile and Duo Push?
What platforms does the Duo Mobile app run on? What about Duo Push?
- Google Android
- Apple iPhone
- RIM BlackBerry
- Java J2ME
- Palm WebOS
- Symbian OS
- Windows Mobile
What if a user does not have a smart phone?
- An ordinary mobile phone (not a smart phone), or even a traditional desktop phone, can be used to authenticate with Duo.
- If the user doesn't have any phone, the institution can elect to purchase a traditional hard cryptographic one-time password token for that user at $20/token, or the school may want to consider an inexpensive prepaid basic cell phone for this purpose.
- Finally, if the person without a phone is just a regular user (i.e., not a user with special privileges or access to sensitive data), yet another option would be to selectively disable use of Duo for that user
On the server side, is Duo deployed at the IdP or the SP?
What services can be secured with Duo? Will it work for the web? Our SSL VPN? What about shell access to Unix hosts?
Our campus is committed to open source software, particularly for security-related applications. Can we see the source code for Duo?
Ready to subscribe and get all the great features of the Internet2 NET+ Duo offering for your organization? You'll need to get some information together, as outlined below.
Determine your eligibility
Not-for-profit institutions of higher education headquartered in the United States are eligible to sign up for the Internet2 Duo offering. Internet2 members receive special pricing, but membership in Internet2 is not required. InCommon participation also isn't required.
For more information on becoming an Internet2 member, see "Internet2 Membership."
Are any special considerations required?
Does your institution require special considerations due to state law or regulation? Are there any mandated limitations? You'll need to indicate this when you engage with Duo. The Internet2 Duo campus agreement is best in class terms
Contact Duo to initiate this process
You can contact the Duo Sales team at:
Telephone: +1 (866) 760-4247