We have implemented DUO MFA for a year or two.It works well except we have one issue.When a user is remote and their account expires it does not allow them to log in.We used to use RSA token but we authenticated first and then logged in with Windows ...