Client sends Duo approval back to Azure.

Secondary authentication approval returned to client.

Authentication approval returned to Duo service.

User receives Duo Push authentication request on device.

User received the Duo Prompt and submits factor selection.

An Azure Conditional Access policy redirects the client browser to Duo.User submits primary Azure credentials.User accesses Microsoft Online or other services using Azure authentication.

Read the deployment instructions for Duo for Azure Conditional Access. After your end users complete primary authentication in Azure they will be redirected to Duo's cloud service to complete two-factor authentication, and subsequently redirected back to Microsoft's service. This solution does not require any Duo software deployed on-premises. Conditional access policies featuring the Duo control can be applied to Azure users, groups, applications, login contexts, and many other categories. Microsoft customers with subscription plans that include Azure AD Premium P1 or P2 can secure Microsoft 365 and Azure logons with the Duo custom control for Azure Active Directory.

Duo Custom Control for Azure Active Directory Conditional Access Learn more about these configurations and choose the best option for your organization. Duo supports multiple solutions for adding two-factor authentication to Microsoft's online services like Microsoft 365, Office 365, and Azure Active Directory.

Setting up mfa for office 365