Duo Security have a very popular MFA cloud service (Multifactor Authentication). This may be a good fit to Cisco Umbrella and the CloudLock CASB service, and is definitely in the Cisco’s long term strategy to become software company (behemot’s pivot takes time).