Identity & Access

Multi-Factor Authentication and SSO in the UAE

Cisco Duo, bought and billed through Bamboozle — multi-factor authentication and single sign-on for every application your team signs into, from $3 per user a month.

Most breaches start with a password that worked. Duo puts a second factor in front of every application — cloud, on-premise and VPN — and gives your team one sign-on instead of a dozen. Licences are per user and monthly, there is no minimum beyond three users, and you can start today and add the rollout work later.

Per user / month
$3
Users minimum
3
From the entry tier
SSO
Duo, licensed through us
Cisco

What You Get

A Second Factor in Front of Everything

Duo sits between your people and your applications, whoever hosts them.

  • Phishing-Resistant MFA

    Push approvals, passcodes, hardware keys and passwordless. The phishing-resistant methods are in the entry tier, not held back for an upgrade.

  • Single Sign-On

    One sign-on across unlimited applications, SaaS and on-premise alike. Fewer passwords is the point: a password nobody types is a password nobody gives away.

  • Device Trust

    Check what a device is running before it gets in — patch level, disk encryption, endpoint protection. Block the laptop that has not been updated since March.

  • Works With What You Have

    Microsoft 365, Google Workspace, VPNs, RDP, SSH and anything speaking SAML or OIDC. Legacy applications go behind a proxy rather than being left out.

  • Risk-Based Access

    From Advantage up, Duo asks for more proof when the request looks wrong — unfamiliar location, new device, impossible travel — and stays out of the way when it does not.

  • Bought Through Us

    One supplier, one invoice, in USD, from a company in your own time zone. The licence is the same Cisco licence either way.

Plans & Pricing

Three Tiers, Priced Per User

Every tier includes three users. Add users at the per-user price; move up a tier whenever the need appears.

  • Duo Essentials

    Simple, strong MFA and single sign-on for every app.

    Per user / month
    $3.00
    Minimum
    $9.00 / month
    Users included
    3
    Billing
    Monthly, per user

    From $3.00/user/mo from $9.00 / month · 3 users included

    Order Essentials
  • Duo Premier

    Complete zero-trust access with device trust.

    Per user / month
    $9.00
    Minimum
    $27.00 / month
    Users included
    3
    Billing
    Monthly, per user

    From $9.00/user/mo from $27.00 / month · 3 users included

    Order Premier

Prices in USD per user per month, excluding VAT. Licences are ordered through our portal and provisioned on the Cisco Duo platform.

Getting Started

Licences Today, Rollout When You Are Ready

Buying the licences and deploying them are two different jobs, and only one of them needs a project plan.

  1. Choose a Tier

    Essentials for MFA and SSO, Advantage for risk-based access and threat detection, Premier if you want device trust and VPN-less access. Three users included in each.

  2. Order

    Order through the portal and the licences are provisioned on your Duo tenant. Monthly billing, no annual commitment.

  3. Protect the Obvious Things First

    Email and the VPN cover most of the risk on day one, and neither needs an identity project. Admin accounts next.

  4. Then the Rest

    Single sign-on across the application estate, legacy systems behind a proxy, and a joiner-mover-leaver process. That is the part that benefits from a plan.

Put a Second Factor in Front of It

Licences are per user and monthly, three users included, no annual commitment. Order the tier you want and it provisions on your Duo tenant — or talk to us first if the rollout is the part you are worried about.

FAQ

Frequently Asked Questions

What does Duo cost?
Three tiers, priced per user per month: Essentials $3.00, Advantage $6.00 and Premier $9.00. Each includes three users, so the smallest invoice is $9.00, $18.00 or $27.00 a month. Billing is monthly — there is no annual commitment.
Do I need the rollout project to buy licences?
No. The licences are self-service and provision on their own. The engagement exists because deploying identity across an estate — inventory, SSO design, legacy applications, joiner-mover-leaver — is real work, not because the licence needs it. Plenty of customers protect email and the VPN themselves and stop there.
Which tier should we start on?
Essentials if you want MFA and single sign-on, which is most people. Advantage if you want the platform to react to risk rather than ask for a second factor every time. Premier if you want device trust and VPN-less access to private applications. Moving up later is a billing change, not a migration.
Is this the same Cisco Duo sold directly?
Yes — the same platform and the same tiers. What changes is who you buy from and who answers the phone: one supplier, one invoice in USD, and a team in your time zone.
Can we self-host identity instead?
Yes, and sometimes you should. Authentik runs on infrastructure you own, including our Dubai and Fujairah cloud, and removes the per-user licence entirely in exchange for running it yourself. We will say plainly which of the two fits — that comparison is on our services site.
Does MFA cover our legacy applications?
Usually, through a proxy rather than natively. Anything speaking SAML or OIDC integrates directly; anything older goes behind Duo Network Gateway or a similar front end. Which of your applications fall into which group is the first thing an inventory answers.