We've been using DUO for years as the primary MFA for all clients. Microsoft has repeatedly changed how we have to do this over the years, to the point where DUO is even deprecating the MS Azure Active Directory app soon because it hasn't worked pro...