YubiKeys, FIDO tokens, OATH tokens (including Google Authenticator), our own Green Rocket 2FA mobile app
Duo Security:
YubiKeys, OATH tokens, FIDO U2F tokens, Duo Mobile app
Allows for multiple tokens for each user
GreenRADIUS:
Yes
Duo Security:
Yes
Users pre-selecting tokens before authentication
GreenRADIUS:
Users DO NOT need to pre-select which token they will use as their second factor. Users can simply use any of their assigned tokens for authentication.
Duo Security:
Users MUST pre-select which token they will use as their second factor. Each time a different token will be used, users must select the token prior to authentication.
Auto-enrollment of YubiKeys
GreenRADIUS:
Yes, GreenRADIUS can be configured so YubiKeys can be assigned to users automatically upon first use.
Duo Security:
No, users must register their YubiKeys.
On-premise / Cloud
GreenRADIUS:
Yes, GreenRADIUS can be either an on-premise solution, where GreenRADIUS can be set up in an organization’s network and behind its firewall or in a cloud environment, such as an organization’s AWS infrastructure.
Duo Security:
Cloud only
Windows Logon
GreenRADIUS:
YubiKeys and other FIDO U2F tokens can be used for online AND offline login attempts
Duo Security:
YubiKeys and other FIDO U2F tokens can be used for offline login attempts ONLY. They CANNOT be used for online login attempts
High availability / Synchronization
GreenRADIUS:
Multiple GreenRADIUS servers can be synced to provide a HA/failover configuration. For an on-premise solution, even if the external internet is down or offline, users can still authenticate on the internal network.
Duo Security:
N/A
Token secrets and authentications
GreenRADIUS:
GreenRADIUS securely stores and protects token secrets internally. Authentications are also done securely.
Duo Security:
Token secrets are stored in the cloud, and authentication attempts are validated in the cloud as well