Migration to Cisco Security Cloud Sign On identity provider

A migration to Cisco Security Cloud Sign On identity provider is a security conversion process that

requires all Security Cloud Control tenants to use Cisco Security Cloud Sign On as their identity provider
implements DUO for multifactor authentication (MFA) to provide an added layer of security, and
requires users to activate their account in Cisco Secure Sign-On and configure MFA using DUO before logging into Security Cloud Control.

Security requirements and exceptions

Security Cloud Control requires MFA which provides an added layer of security in protecting your user identity. Two-factor authentication, a type of MFA, requires two components, or factors, to ensure the identity of the user logging into Security Cloud Control. The first factor is a username and password, and the second is a one-time password (OTP), which is generated on demand.

Note

If you sign in to Security Cloud Control using your own single sign-on identity provider, this transition to Cisco Security Cloud Sign On and DUO does not affect you. You continue to use your own sign-on solution.
If you are in the middle of a free trial of Security Cloud Control, this transition does apply to you.

Pre-migration preparation recommendations:

Install DUO Security. We recommend installing the DUO Security app on a mobile phone. Review DUO Guide to Two Factor Authentication: Enrollment Guide if you have questions about installing DUO.
Time Synchronization. You are going to use your mobile device to generate a one-time password. It is important that your device clock is synchronized with real time as the OTP is time-based. Make sure your device clock is set automatically or manually set it to the correct time.
Create a New Cisco Security Cloud Sign On Account and Configure DUO Multi-factor Authentication. It is a four-step process. You need to complete all four steps.