Security Center not recognizing DUO for MFA

Question

Our Security Center recommendations include: "MFA should be enabled on accounts with owner permissions on your subscription". We have enabled conditional access for all accounts using DUO MFA and it works as expected (users are prompted to verify in DUO when logging into Azure admin portal). Why isn't Security Center picking up on this and giving us the points for having MFA enabled?

Answer 1

Hi @Cat Daddyx2 , unfortunately Security Center does not recognize third party applications such as DUO.

Security Center's MFA recommendations don't support third-party MFA tools (for example, DUO).

If the recommendations are irrelevant for your organization, consider marking them as "mitigated" as described in Exempting resources and recommendations from your secure score. You can also disable a recommendation.

If this answer helped you, please mark it as "Verified" so other users may reference it.

Thank you,
James