How to setup Cisco Duo with External Authentication Methods in Microsoft Entra

[@sunshinewolf5980]

Thank you! I needed to know this as this month is the deadline given by Microsoft to add Duo as EMA.

[@peterjust7354]

What happens if the users are already registered for SSPR? is it best to clear those registrations before doing this to minimize the disruption?

[@pyrozombi3]

We have a problem where our infosec team requires us to set a 3 hour sign in frequency for Microsoft Admin Portals. We only have DUO EAM policy applied to those portals and we get a sign in errors when the sign in frequency is enforced. Have you seen errors using sign in frequency with DUO EAM?

[@ourcloudnetwork]

I have tried to replicate this, but cannot get this to break. Have you looked at your sign-in logs and evaluated what CA policies are being applied?

[@pyrozombi3]

@@ourcloudnetwork we have a hybrid join requirement, MFA requirement, and the sign in frequency. If my admins use the Microsoft MFA there is no error. Error only occurs when there DUO EAM is used. The sign in logs shows everything is successful though and satisfied :/

[@AncelSimethy]

Thanks so much