(WIP) Project - DUO - MFA Deployment

Synopsis: Outline of deploying DUO MFA to a new environment.

Published November 16th, 2025
Last Modified: November 16th, 2025

Intro: This will hopefully become an indepth outline for deploying DUO MFA to a new tenant.

Quick Run Down

1.) Verify Licenses

2.) Create Duo Tenant

3.) Provision Users

4.) Protecting O365

5.) Protecting VPN

6.) Protecting WorkStations

Verify Licensing

Confirm the users are licensed properly in Office 365 to allow use of Duo with Conditional Access Policies.

Suitable subscriptions as of this writing:


• Microsoft 365 Business Premium
• Enterprise Mobility & Security E3 (add-on)
• M365 E3 and E5. (Note that O365 is not the same as M365)

Create Duo Tenant

2. Create the account
a. Accounts -> Add Account
b. Account Name = Customer name
c. Admin email can be left blank or populate with dedicated client admin account if licensed for email
d. Fill out address information for client, hit save
e. Select edit next to client in account list
f. Edit the edition of Duo to be used. Typically Duo Access.
i. This has to be set for the entire account, no way to change per user

Provision Users

PlaceHolder Text

Protect O365

PlaceHolder Text

Protect VPN

PlaceHolder Text

Protect Workstations

PlaceHolder Text

Newest Post