Duo + Entra ID - External Authentication Methods

Hi, I'm Mariah Willitzki. I'm a customer success specialist here at Cisco, and today I'm gonna be providing a brief overview of Duo plus entra ID external authentication methods focusing on its benefits and configuration.00:01Duo integrates seamlessly with Microsoft ontra ID as an external authentication method. It's enhancing security by adding phishing resistant MFA and Duo's granular access policies to entratra ID logins.00:19It's doing this through device trust and health checks. Duo performs device health verification during logins ensuring that only trusted devices are gaining access through risk based authentication by automatically stepping up authentication when risky behavior is detected, such as a login from.00:34A new location or device.00:54Improved user experience. Users can now enjoy consistent and seamless authentication flows across Microsoft and non Microsoft applications minimizing any repeated MFA prompts and comprehensive coverage that protects all federated applications and on premise resour.00:57Sources with a single MFA system, simplifying administration and compliance.01:16And to start the setup, we're gonna navigate to applications and then add a new application. The application's name is Microsoft Entratra ID external authentication methods. Once created, you will need to grant Duo permission to read from your entra ID directory. Just select all.01:22Authorized and you'll be prompted to log in with your admin account and accept the terms outlined in the prompt provided. Duo only requires access to Entra ID.01:42When we have the application set up in duo, we will then take those values provided and use them to set up an external authentication method within entratra ID itself. From entra ID, navigate to authentication methods, and at the top, you're gonna see an option to add the external authentication method.01:56Once all the values from the duo tenant are populated within ontra ID, we could set the scope of who will have access to Duo as an MFA method using the include section. To round out the configuration and to ensure that MFA is a requirement for authentication, we will create a.02:15Conditional access policy within ontra ID.02:35Please note that Azure P one or P two licensing is required to leverage conditional access in entry ID. Once the policy is created, we will define what users/groups will use the policy. We will set the target resources to select which applications that will fall under this policy.02:39And lastly, we will set the grant section to require multi factor authentication. And now that Duo is set up as an external authentication method within ontra ID, let's talk about some quick post deployment considerations.02:591st, if Duo serves as your primary MFA method, consider adjusting Microsoft authenticator settings to avoid any conflicting prompts and ensure that there is a consistent authentication experience. Also, you want to review the authentication settings on the ontra ID tenant to ensure.03:16Sure that Duo is included as an available multi factor option for your end users.03:36In summary, Duo plus entratra ID EAM provides a seamless user friendly and secure way to enforce multi factor authentication across your Microsoft entra ID environment. Using Duo plus entra ID EAM is gonna ensure compliance with mandatory Microsoft requirements to enforce.03:44Force MFA for admin access and other Microsoft administrative portals. The integration supports advanced security features like risk based authentication and device trust while simplifying administration through centralized policies. Thanks for watching.04:04