Showing results for 
Search instead for 
Did you mean: 

Configuring Duo for AWS


Is it possible to use Duo with AWS without AWS SSO? For example with ADFS

thank you

5 Replies 5

Cisco Employee
Cisco Employee

Yes, you can use AD FS as the IdP for AWS, and install the Duo MFA plugin for AD FS.

Duo, not DUO.


If this is true, the Duo documentation is really confusing because the link you gave me ask to install AWS SSO:

Microsoft AD FS

Microsoft’s Active Directory Federation Services (AD FS) is a popular choice for SSO because it easily integrates with the AD identity store many organizations already have deployed. Duo’s support for cloud applications and SSO drops in to an existing AD FS installation to provide secondary authentication after a user passes primary authentication (successful Active Directory logon).

Once your AD FS services are up and running, the second step is to configure the SSO partnership between your AD FS service and the external cloud resource, in this case AWS. Learn more about configuring AWS SSO with AD FS at the [Amazon AWS blog].

Which is true, the Duo documentation or you?

Thanks for your help

There is “AWS SSO”, a named product from Amazon, and “AWS SSO”, the concept of signing in to AWS using single sign-on. In the linked documentation we mean the latter, using AD FS to provide SSO to AWS.

Try clicking through to the blog post for more information.

I hope that clears it up.

Duo, not DUO.

It does thank you. Using the sae name for 2 different things confused me

I get that. We put our doc up before the “AWS SSO” product existed, but I’ll make sure to get that wording updated on our side.

Duo, not DUO.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links