Supporting many customers and servers with multiple technicians

[bents-sales]

Dear Community,

We are an MSP and want to include DUO in our security program (we already use DUO internally). 

We are about 15 technicians who do not have a clear customer assignment. Does this mean that each of these technicians must have the MFA in their DUO Push app for each of the customer's servers that we manage remotely? Or is there any central way?

Or to put it another way: what is the best way to support customers in this scenario? 

Thank you very much

[Jonatan Jonasson]

In short, probably yes, but it also depends entirely on how you service your customers to begin with and how you authenticate into those servers.

So, for each DUO Customer you set up, and then enroll your technicians in, you'll end up with a new entry in the DUO app.

"Technically" you could use a single DUO tenant for everyone, and you would achieve the "only one account in the DUO app" goal, but as an MSP you'd be opening up a whole can of liabilities and risks associated with combining multiple customers in a single DUO tenant. (And an administrative nightmare for servers that the customers/others access as well.)

On a related note, since you are an MSP, you should look into the DUO MSP program, so you can easily create and manage different duo accounts for different customers with easy onboarding.
It might help with this overall journey.
Plus, then you could also reach out to your DUO MSP account/partner manager and get more tailored answers to these kind of questions.

[ccieexpert]

DUO MSP is the way to go..