03-29-2022 04:09 AM
Hi
As per subject, do accounts not supporting modern authentication, iow bypassing DUO, need a DUO license?
03-29-2022 10:24 AM
Hi @fnanfne,
WS-Trust authentication with Duo Single Sign-On for Microsoft 365 utilizes the same users as using modern authentication. If your policies allow unenrolled users they would be let through without enrolling and wouldn’t add to your user count though we recommend getting all users enrolled in Duo to be able to provide them with Duo MFA protection and policy enforcement.
03-30-2022 05:02 AM
Thanks for the reply Jamie. It pains us to allow even just one “account” to bypass DUO in this way, as it’s now an annoying and unnecessary concern. However, some of our accounting- and support functions simply cannot support modern authentication, at least yet.
Unbelievable blindness on my part, I now see the option right under my nose…“Bypass Users”. However, the licenses are not being salvaged when I enable this on the accounts need to be re-added?
Also, what is the difference between adding these accounts to WS Trust vs flipping the “bypass” switch?
03-30-2022 05:41 AM
Hi @fnanfne,
I think instead of Bypass Users you may want to look at New User Policy which will instead of bypassing all users from using Duo MFA will just allow unenrolled users which will still let WS-Trust work without enrolling the user in Duo.
03-31-2022 09:52 AM
Great stuff thanks again Jamie!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide