Mobile and Desktop clients that support Microsoft's modern authentication (such as Office 20 applications).Ĭonditional Access cannot add third-party MFA for Office clients that do not support modern authentication, such as Office 2010.Note that Azure Active Directory Conditional Access protects cloud applications only when the user access originates from the following client applications: Be sure to review Azure Government's additional variations in Azure Active Directory Premium features.

Therefore, the Duo Azure conditional access application is not available in Duo Federal plans. Azure Government ExclusionĪzure Government does not yet provide support for custom controls in Conditional Access.

Learn more about this Microsoft limitation for custom controls in the Azure Active Directory documentation.ĭuo MFA can satisfy CA multifactor requirements when you federate Azure/Microsoft 365 with Duo Single Sign-On or when you federate Azure with Microsoft AD FS, install Duo for AD FS, and configure AD FS to pass an Authentication Method References claim for MFA back to Azure. Custom controls, like the Duo custom control for Azure CA, cannot satisfy a CA rule that requires 'multifactor'. Microsoft does not evaluate authentication with a custom control as part of a Conditional Access multifactor authentication claim requirement. Azure Custom Control Limitations MFA Requirement Excludes Custom Controls Please review Microsoft's Azure Conditional Access documentation before configuring Duo authentication in your Azure Active Directory tenant.

Verify your Microsoft subscription features before proceeding. Conditional Access with third-party MFA custom controls requires an Azure Active Directory Premium P1 or P2 subscription.

Azure active directory mfa