Prompted to Set Up Microsoft Authenticator After Activating Duo MFA

What to do if Microsoft prompts you to set up Microsoft Authenticator shortly after activating Duo MFA.

When signing in to a Microsoft service shortly after activating Duo multi-factor authentication (MFA), you may see a message asking you to set up Microsoft Authenticator. This prompt can appear even though Duo MFA is already configured.

Solution

This issue most commonly affects new users and is caused by synchronization timing between Duo MFA and Microsoft Entra ID External Authentication Methods (EAM).

1. Do not continue through the Microsoft Authenticator setup screens.
2. Wait at least 30 minutes to allow Duo MFA and Microsoft Entra ID to finish syncing.
3. Try signing in to the Microsoft service again.
4. If the message continues, clear your web browser’s cookies and cache, then try again.

If you continue to receive the message after completing these steps, contact the IT Service Desk for assistance.

Environment

• Microsoft 365
• Microsoft Entra ID with External Authentication Methods (EAM)
• Duo Multi-Factor Authentication