do i have to enable mfa if i'm using Duo mfa already

Question

Received an email from Microsoft this morning indicating we would have to enable MFA in our tenant by 10/15/24. We already use Duo Security for MFA. Can I disregard the Microsoft email?

Answer 1

@Mike P. Smith

Thank you for posting this in Microsoft Q&A.

As I understand you have received an email from Microsoft regarding MFA enforcement for all users while access any of the Azure resources. But you already have DUO security as MFA provider.

If your Duo MFA security is able to send the MFA claim to Azure post performing secondary authentication, then you can disregard this email. Azure receives an information stating the user as already performed an MFA then Azure will not prompt for MFA again. Sending MFA claim to Azure will be the way for letting Azure know that MFA is already being performed.

You can also add Duo security as external authentication in Entra ID portal. You can follow below instructions,

https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-external-method-manage

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.