Cisco Systems Inc. has introduced a new Identity and Access Management (IAM) solution through its Cisco Duo division, marking a significant expansion of the company’s enterprise authentication capabilities. The platform, called Duo Identity and Access Management (Duo IAM), addresses the growing challenge of identity-based attacks in the era of artificial intelligence, building on Duo’s established presence in the enterprise security market.
The new platform takes a security-first approach, incorporating protection measures at every level of the solution, setting it apart from traditional IAM solutions that often treat security as an optional component. The development comes as recent research shows that 93 percent of organizations experienced identity-related security breaches in 2024.
Key features of Duo IAM include Complete Passwordless functionality, which eliminates passwords from the authentication process, following the industry’s movement toward passwordless authentication adoption. The platform’s Proximity Verification feature uses Bluetooth Low Energy to confirm that a user’s mobile device and access device are in close proximity, similar to technologies used in modern digital car key systems.
The solution introduces Session Theft Protection, reducing reliance on browser cookies to prevent session hijacking, addressing a critical vulnerability in traditional web authentication systems. The feature is particularly relevant as organizations face increasingly sophisticated cyber threats.
The platform’s new User Directory for managing identities, including usernames, emails, and roles, builds upon Duo’s experience in providing security solutions for hybrid work environments. Duo IAM can integrate with existing third-party identity systems, functioning as either an identity broker or secondary identity provider, allowing organizations to maintain their current infrastructure while enhancing security measures.
Building upon Duo’s established multifactor authentication capabilities, the platform delivers comprehensive phishing resistance without requiring expensive hardware keys. The enhancement addresses a significant security concern, as identity-based attacks currently represent 60 percent of Cisco Talos Incident Response cases in 2024, reflecting a broader trend of increasing identity fraud across industries.
“The security industry is facing an ‘identity crisis’ as persistent identity-based attacks are among the most dangerous and costly challenges for security teams. Attackers don’t need to hack in, when they can simply log in,” said a Cisco representative.
The platform balances enhanced security with user experience while reducing management costs. By incorporating security features by default, Duo IAM works to prevent attackers while maintaining an efficient security infrastructure, addressing the growing need for robust authentication solutions in an increasingly AI-driven threat landscape.
Sources: Cisco Newsroom, MSSP Alert, SiliconANGLE, Investing.com, TechZine
