Azure B2B trust using Cisco Duo

[Paleclaw]

We currently have several other tenants connected to our tenant via B2B and several of these have “Trust multi-factor authentication from Azure AD tenants” enabled. We are adding our first tenant that uses Cisco Duo for 2FA protection purposes.

We don’t want them to have to authenticate using MFA on our tenant. Does using Cisco Duo fulfill the cross tenant mfa trust setting or will they be prompted to setup MFA?

[DuoKristina · Accepted solution]

Which Duo application are you implementing for Azure.

Microsoft does not recognize CA custom controls, like Duo’s custom control, as meeting an Azure multifactor requirement. See more details about that here.

Federation with Duo SSO or with AD FS plus the Duo MFA plugin and a custom claim will satisfy an Azure MFA requirement.