Duo Desktop

About

Duo Desktop, formerly known as Duo Device Health, gives organizations more control over which Linux, macOS, and Windows laptops and desktops can reach corporate applications. It works through three components: Duo access policies that enforce application access based on device health, a native client app that checks a device's security posture when a user authenticates through Duo's browser-based prompt, and additional endpoint information shown in the Duo Admin Panel.

When a user first logs in to an application protected by the Duo Universal Prompt or traditional Duo Prompt with a Duo Desktop policy set to require the app, they are prompted to download and install Duo Desktop. If the device fails the policy's security requirements, Duo blocks authentication and tells the user why, along with steps to remediate their device. Duo Desktop is not available for ChromeOS, though ChromeOS device health checks can use the Chrome Enterprise browser data source. Requirements include a Duo Essentials, Advantage, or Premier subscription and an administrator role with the Owner, Administrator, or Application Manager role. Note that the device information is not uniquely identified, so enabling device registration is recommended to reduce the risk of spoofed responses.