What’s Included
After the initial implementation described in the Onboarding section, Managed Solution will provide managed Duo multi-factor authentication (“MFA”) services to continuously secure Client’s authentication environment. We will oversee authentication operations, including monitoring, policy management, user enrollment support, system maintenance, and reporting to ensure access security and operational continuity.
Services include:
- Managed Solution will continuously monitor Duo authentication logs for anomalies, failure spikes, and suspicious activity, including repeated failed authentication attempts, unusual login locations or times, and potential credential stuffing or brute-force attacks. Verified security incidents or high-risk findings will be escalated to Client’s designated contacts and addressed in accordance with applicable incident response procedures.
- Managed Solution will review and adjust Duo security policies, access controls, and device trust rules as needed to reflect changes in Client’s security requirements, user base, or IT environment, including configuring authentication methods, enforcing device health checks, and applying group-based or application-specific access policies.
- Managed Solution will manage the full lifecycle of user and device records within the Duo platform, including provisioning and deprovisioning users, performing device resets, issuing token replacements, and troubleshooting authentication failures or enrollment issues reported by Client’s users or administrators.
- Managed Solution will apply periodic platform updates and implement security tuning in accordance with Duo best practices and Consultant’s standard security configurations, ensuring the Duo environment remains current, properly configured, and aligned with evolving security standards.