Duo Passport

I'm just Dean Brady with Cisco. In today's session, we'll take a quick look at why Access needs a new approach, introduce Duo passport, walk through how it works, and finish with the key benefits and how you can get started. Identity doesn't stop at the login screen. Users move across browsers, native apps, VPN, and remote.00:00Access constantly. And if we don't maintain trust throughout those workflows, attackers take advantage. Duo passport brings seamlessness and security together by extending identity assurance from login to logout.00:20Users interact with dozens of different applications in a single day. Each one handles session management differently, often relying on browser cookies that attackers can scrape, replay or intercept. Info Stealer malware, MITM frameworks, and token replay attacks are all designed to exploit session cookies.00:33Bypassing authentication altogether, and at the same time repeated MFA prompts slow users down. We need a way to maintain trust across every application, not just at login. Duo passport modernizes access by extending identity assurance beyond the login event. Instead of relying on fragile session could.00:53Keys Passport creates a cryptographically bound session tied to the user and their device. If that token is scraped or replayed elsewhere, it simply doesn't work. The result is a seamless experience for users and stronger protection against one of today's most active attack vectors.01:12Here's how it works. After a user authenticates with strong MFA, Duo passport generates a device bound cryptographic session. This replaces the traditional cookie based model, meaning attackers can't hijack sessions by stealing browser tokens. And as a user moves throughout browser apps, native apps, VP.01:31Or remote access tools passport extends the verified identity to each workflow without requiring additional prompts. A practical example, a user signs into Duo SSO in their browser then launches into native desktop apps or initiates a VPN session. With passport, trust flows across all of those.01:50Experiences securely and consistently.02:10Passport closes the door on a major attack technique cookie based session hijacking. By removing the dependency on browser cookies and replacing them with cryptographically bound tokens, attackers lose one of their easiest paths to compromise. At the same time, users see fewer MFA prompts in a smoother experience.02:14Administrators experience few help desk calls and gain consistent identity assurance across their environments and teams strengthens zero trust because verification continues after authentication, not just at login. Passport is simple to deploy. It works with Duo SSO extends to both browser based.02:33List and native applications and can be rolled out gradually. Start with a pilot group or a subset of applications, gather feedback and scale when you're ready, NO major architectural changes required. Duo Passport delivers continuous identity assurance, reduces friction for users, and strengthens your zero trust posture.02:53By moving beyond fragile session cookies. Passport is available to Duo customers on the Advantage and Premier editions. To learn more, start a trial or begin enabling passport in your environment, visit duo.com/product/passport. Thanks for watching.03:13