In this stage, the customer will:

• Install Duo Mobile on their mobile device

• Get started with Duo by logging in for the first time

• Set up a backup phone number to their Duo admin account

The customer will exit this stage when they have:

• Logged into the Admin Panel as an owner for the first time

• The owner or admin has downloaded Duo Mobile on their mobile device and registered their device

• Encourage customer to learn about multi-factor and two-factor authentications

Provide customer with videos on two-factor authentication

In this stage, the customer will:

• Set up additional owner account(s)

• Begin to enroll users in Duo

• Protect their pilot application with Duo

• Test their application with Duo 

The customer will exit this stage when they have:

• Added a second owner to prevent lockout

• Verified that at least one user has enrolled

• Protected at least one app by Duo MFA

• Verified at least one user has authenticated in the last 30 days

• Watch this video to learn about manage a administrators and users

• Review the administrator matrix guide

In this stage, the customer will:

• Enroll additional users in Duo

• Protect additional applications

• Review two-factor authentication methods

• Ensure users are actively authenticating into protected applications

The customer will exit this stage when they have:

• Verified that more than 50% of users are enrolled in Duo

• Verified at least two applications are protected by Duo MFA

• Ensure your customer is continuing to add users and that those users are authenticating every seven days

In this stage, the customer will:

• Continue to enroll additional users in Duo and protect additional applications using Duo
• Set up directory synchronization

Ensure users are actively authenticating into protected applications

Encourage users to authenticate with stronger authentication factors

The customer will exit this stage when they have:

• Verified that more than 75% of users are enrolled in Duo
• Completed user enrollment through directory sync

• Protected at least ten applications with Duo MFA
• Ensured that more than 10% of users authenticated using the more secure (better or best) authentication factors in the last seven days 

• Ensure your customer enables directory sync to auto-enrollment users
• Ensure your customer is continuing to add users and that those users are authenticating every seven days

In this stage, the customer will:

• Continue to enroll additional users in Duo and protect additional applications
• Review two-factor authentication methods

• Ensure users are actively authenticating into protected applications
• Encourage users to authenticate with stronger authentication factors

The customer will exit this stage when they have:

• Confirmed that more than 85% of users are enrolled in Duo
• Protected at least 15 applications with Duo MFA

• Verified that more than 80% of enrolled users have authenticated in the last seven days (excluding bypassed users)
• Ensured that more than 20% of users authenticated using the more secure (better or best) authentication factors in the last seven days 

• Ensure your customer is authenticating to better or best authentication factors

In this stage, the customer will:

• Continue to enroll additional users in Duo and protect additional applications
• Review two-factor authentication methods

• Ensure users are actively authenticating into protected applications
• Encourage users to authenticate with stronger authentication factors

The customer will exit this stage when they have:

• Confirmed that more than 90% of users are enrolled in Duo

• Protected at least 20 applications with Duo MFA

• Verified that more than 90% of users have authenticated in the last seven days (excluding bypassed users)

• Ensured that more than 30% of users authenticated using the more secure (better or best) authentication factors in the last seven days 

• Encourage your customer to perform health checks

In this stage, the customer will:

• Install Duo Mobile on their mobile device
• Log into Duo for the first time
• Enable SSO

The customer will exit this stage when they have:

• Enabled Single-Sign On

• Assigning an additional owner to prevent lockout

In this stage, the customer will:

• Set up additional owner account(s)
• Begin to enroll users in Duo
• Configure their authentication source
• Integrate their pilot application with Duo Single sign-on

The customer will exit this stage when they have:

• Verified that one or more owners is added, enrolled at least one user, and protected at least one application with SSO

• Watch this video to learn about manage a administrators and users

• Review the administrator matrix guide

In this stage, the customer will:

• Enroll additional users through the configured identity source 
• Ensure frequently used or business-critical applications are being protected
• Review the authentication summary log within the Admin Panel to confirm that a majority of enrolled users have authenticated 

The customer will exit this stage when they have:

• Enrolled at least two users
• Verified at least two users authenticated using SSO in the last seven days

• Continuing to enroll new users

In this stage, the customer will:

• Continue to enroll additional users in Duo
• Monitor and ensure users are actively authenticating with Duo SSO
• Encourage users to authenticate with stronger authentication factors

The customer will exit this stage when they have:

• Verified that more than 50% of users are enrolled in Duo, based on number of licenses purchased
• Verified that more than 50% of enrolled users have authenticated using SSO in the last seven days
• Verified that more than 10% of authentications have used better or best authentication factors in the last seven days

• Ensure frequently used or business critical applicationss are being protected
• Review the authentication summary log within the Admin Panel to confirm that a majority of enrolled users have authenticated 
• Authenticating using Duo stronger measures such as Duo Verified Push, Roaming Authenticators (e.g., U2F and Security Keys), Platform Authenticators (e.g., Touch ID and Windows Hello), Passwordless and WebAuthn, or Remembered Devices.

In this stage, the customer will:

• Continue to enroll additional users in Duo
• Continue to protect additional applications using Duo
• Review two-factor authentication methods
• Ensure users are actively authenticating into protected applications
• Encourage users to authenticate with stronger authentication factors

The customer will exit this stage when they have:

• Protected at least ten applications with Duo Verified that more than 80% of users are authenticating with Duo

• Configuring one of the following verification methods: Roaming Authenticators, U2F, Security Keys, Platform Authenticators, Touch ID, Windows Hello, Passwordless, and WebAuthn
• Adding applications that require users to authenticate via Duo for access

In this stage, the customer will:

• Continue to protect additional applications using Duo
• Ensure users are actively authenticating into protected applications

The customer will exit this stage when they have:

• Protected more than 20 apps with Duo
• Verified that more than 80% of enrolled users have authenticated in the last seven days (excluding bypassed users)

• Ensure your customer is watching the latest Duo best practices

In this stage, the customer will:

• Log into the Duo Admin Panel and select Single Sign-On
• Review the information and terms, then select Activate and Start Setup
• Prepare to configure an authentication that is Active Directory or SAML Identity Provider
• Choose a pre-configured SSO application and refer to that application's SSO documentation, and verify Duo SSO configurations

The customer will exit this stage when they have:

• Enabled Single Sign-On

• The first three steps in the stage can only be completed by an Owner within the Admin Panel

In this stage, the customer will:

• Log into the Duo Admin Panel and select Single Sign-On
• Review the information and terms, then select Activate and Start Setup
• Prepare to configure an authentication that is Active Directory or SAML Identity Provider
• Choose a pre-configured SSO application and refer to that application's SSO documentation, and verify Duo SSO configurations

The customer will exit this stage when they have:

• Enabled Single Sign-On

• The first three steps in the stage can only be completed by an Owner within the Admin Panel

In this stage, the customer will:

• Log into the Duo Admin Panel and select Single Sign-On
• Review the information and terms, then select Activate and Start Setup
• Prepare to configure an authentication that is Active Directory or SAML Identity Provider
• Choose a pre-configured SSO applicable users through Duo Central which will provide administrators a centralized way to manage all accounts and seamlessly govern which users have access to them on and refer to that application's SSO documentation, and verify Duo SSO configurations

The customer will exit this stage when they have:

• Enabled Single Sign-On

• The first three steps in the stage can only be completed by an Owner within the Admin Panel

Managed all users through Duo Central, which will provide administrators a centralized way to manage all accounts and seamlessly govern which users have access to them

Used a single set of credentials to log into multiple websites and applications, both in the cloud and on-premises, eliminating user log in fatigue

Customer can enable SSO in 15 minutes or less