How to switch to Microsoft External MFA with Duo?

Overview

Microsoft is changing their Multi-factor Authentication (MFA) configuration which requires changing how Duo MFA is used with your account. After your account is "migrated" to the new "External MFA" configuration, you will see these new sign-in screens.

 

Initial Enrollment

After entering your password, you will see a dialog "Let's keep your account secure". Click on "Next".

Uploaded Image (Thumbnail)

The next screen mentions you will be enrolled in Duo MFA. This does *not* require a full re-registration in Duo, it just requires a verification of your existing Duo MFA sign-in. Click on Next.

Uploaded Image (Thumbnail)

Sign-in to Duo like normal.

Uploaded Image (Thumbnail)

The Duo MFA sign-in method will be added to your account. Click Done.

Uploaded Image (Thumbnail)

 

 

 

Every Sign-in

After you have registered Duo MFA with your account, it will be displayed as an option during sign-in. If Duo MFA is the only registered authentication method, you will see a "Verification Required" screen and you must click on "Continue" to redirect to Duo MFA.

Uploaded Image (Thumbnail)