Remove device-security-beyond-enrollment-securing-self-service-portal
article thumbnail

Device Security Beyond Enrollment: Securing the Self-Service Portal

Duo's Security Blog

Duo’s Self-Service Portal (SSP), which lets users manage their own authentication devices, saves time for both Duo users and admins. Often the first step for an attacker with stolen credentials is to try to fraudulently register an MFA device , giving persistent access to the user’s account. What’s the risk?