CyberArk and Duo

	CyberArk	Azure PIM and JIT
Additional Infra Setup	Additional IaaS Resources required – VMs (PV, PSM, PVWA, Application gateways and load balancers) DUO Application Gateway, VMs, Load Balancers DUO Federation with GSSO Ido Introduces multiple components and hops	PaaS Service from Azure
Federation with iSmile Technologies ID	CyberArk will utilize a Web Portal front end which will allow iSmile Technologies users to remotely login using their federated ismiletechnologies.com credentials. Once authenticated with CyberArk and having provided a valid MFA token using DUO Security	No Federation with iSmile Technologies ID Currently users need to use Cloud Native Accounts; and Guest users cannot use RDS service.

CyberArk

Azure PIM and JIT

Additional Infra Setup

Additional IaaS Resources required – VMs (PV, PSM, PVWA, Application gateways and load balancers)

DUO Application Gateway, VMs, Load Balancers

DUO Federation with GSSO Ido

Introduces multiple components and hops

PaaS Service from Azure

Federation with iSmile Technologies ID

CyberArk will utilize a Web Portal front end which will allow iSmile Technologies users to remotely login using their federated ismiletechnologies.com credentials. Once authenticated with CyberArk and having provided a valid MFA token using DUO Security

No Federation with iSmile Technologies ID

Currently users need to use Cloud Native Accounts; and Guest users cannot use RDS service.