Nine of fourteen models named Cisco Duo first on the direct prompt; five named Microsoft Entra ID. Cisco Duo was named by fourteen of the fourteen models and Microsoft Entra ID by thirteen and Cisco Duo carries 63 labels and Microsoft Entra ID 46, so the shares are not directly comparable.
Named in six categories this edition.
Named in thirteen categories this edition.
Share is the count of first choices across the direct, paraphrase, budget and scale prompts over all fourteen models, for a mid-market B2B company; rank is within the category; every quote names the model and the prompt it came from. Both figures come from the multi-factor authentication page.
Across every category in the October 2026 Edition, Cisco Duo and Microsoft Entra ID were named in the same answer 153 times, of the 230 answers naming Cisco Duo and the 543 naming Microsoft Entra ID. In those answers Microsoft Entra ID took the first choice fifty-one times and Cisco Duo forty-three.
| Model | Direct | Paraphrase | Comparative | Budget-constrained | Scale-constrained | Negative |
|---|---|---|---|---|---|---|
| Claude Haiku 4.5 | ||||||
| GPT-5.4 mini | ||||||
| Gemini 3.5 Flash | ||||||
| Perplexity Sonar | ||||||
| Grok 4.20 | ||||||
| Mistral Small | ||||||
| DeepSeek V4 Flash | ||||||
| Llama 4 Maverick | ||||||
| Qwen 3.7 Flash | ||||||
| Kimi K2 | ||||||
| GLM 4.7 FlashX | ||||||
| MiniMax M2.5 | ||||||
| GPT-6 Luna | ||||||
| Muse Glimmer 30B |
Bold names in an answer are the products the judge labeled a first choice; a model naming several gives each of them that label. The full answer text for every row is in the record.
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Six of seven in this category shown.
“Duo and Okta are established options, though their pricing is typically quote-based rather than simple low-cost self-serve pricing” GPT-5.4 mini · budget prompt · soft negative
“Push notifications (e.g., "Approve login?" on apps like Duo, Microsoft Authenticator push): Susceptible to MFA fatigue/bombing” Grok 4.20 · negative prompt · soft negative
“Only use push notification systems (like Microsoft Authenticator or Duo) if they are configured to require Number Matching” Gemini 3.5 Flash · negative prompt · soft negative
“Best overall for mid-market B2B: Cisco Duo – MFA-first product with strong phishing-resistant auth (FIDO2/WebAuthn), device trust, and easy deployment.” MiniMax M2.5 · direct prompt · first choice
“Duo Security (Cisco) — it offers the best balance of security, ease of deployment, user experience, and pricing for mid-sized B2B companies.” MiniMax M2.5 · paraphrase prompt · first choice
“Choose Cisco Duo if you want best-in-class ease of deployment and user experience for core MFA with minimal IAM overhead.” Muse Glimmer 30B · direct prompt · first choice
Every negative label with a quote, up to three, then the highest-weighted positives, up to three. Two of two in this category shown.
“If you're a Microsoft shop (most B2B mid-market firms are): Microsoft Entra ID MFA using Conditional Access policies — it's the most cost-effective, deeply integrated solution” DeepSeek V4 Flash · direct prompt · first choice
“Tier 1 (Integrated/Free-ish): Microsoft Entra (Azure AD) or Duo (Cisco). ... sticking with Microsoft's native offering is often the path of least resistance and lowest cost.” Qwen 3.7 Flash · scale prompt · first choice
Comparisons are drawn for the top eight products in each category, each against each. The output is the models' output; nothing here is a recommendation by the index.