You'll need this information to complete your setup.

Click Protect to the far-right to configure the application and get your integration key, secret key, and API hostname. Click Protect an Application and locate the entry for Microsoft RDP in the applications list. Instructions on setting up this method can be found here. Log in to the Duo Admin Panel and navigate to Applications.

OATH-TOTP (authenticator app) - this method of MFA requires installation and usage of the Yubico Authenticator companion app, as well as a YubiKey (our Security Key Series keys won't work with this method).

*Note: Instructions for e xtending FIDO2 passwordless support to Windows 10 sign-in can be found here. See here for instructions covering Azure tenant setup, key registration, and portal (browser) sign-in. See this Microsoft article for clarification on browser support.

FIDO2 passwordless - any YubiKey from the 5 Series and our Security Key Series keys will work with this method, but note that not all platforms (operating systems, browsers, etc.) support FIDO2 passwordless login today, so you may need to use another method of MFA when signing in on certain devices.

Additionally, it is recommended to avoid using an incognito/private browser window or tab when accessing Microsoft's portal, as doing so may cause authentication failures and other issues (this is outside of our control).Ĭurrently there are two YubiKey-compatible methods of MFA supported in Azure (which applies to Office 365):

Note that, as per this Microsoft article, RDP is an unsupported scenario for FIDO2 passwordless login to Windows. If you're having trouble setting up Azure AD (including Office 365) Multi-Factor Authentication, please be sure you are following the instructions mentioned below.

Add yubikey to duo