Issue

Staff or admin accounts not prompted to set up Duo MFA after Microsoft SSO is enabled, including off-network logins.

Environment

• Microsoft SSO enabled
• Duo MFA configured in Aeries
• Affected accounts: new staff or admin only 
  • Duo MFA not supported for parent or student accounts

Cause

Microsoft SSO handles authentication outside the Aeries login flow, bypassing the standard Duo MFA set up prompt. 

Resolution

Create DUO account for new users directly in DUO Admin Portal.