I am using a Synology NAS as an Active Directory Server in a local domain and its very annoying that currently have no way to enforce 2FA for logging in to Windows 10 clients. Someone on the Synology forum suggested using Duo and I can’t figure out if that will work. Note that the Synology NAS is based on Samba, but I don’t want to add anything to it that is not vanilla from Synology so I don’t have upgrade issues.
As a second question, if we have less than 10 users, can we use the free version of Duo? If not, which version would work?
As a third question, we have standardized on Google Authenticator for 2FA. Do we need to use the Duo app? If so, can it replace Google Authenticator for other 2FA applications?