We currently have DUO configured as our 1Pass MFA, we're moving away from DUO and are going to be utilizing the Microsoft Authenticator as our new MFA which I understand is compatible with 1Pass.
My first question is, are we able to slowly migrate people's MFA's from DUO to Microsoft Authenticator or do we need to switch DUO off in 1Pass first before we can then enable the other MFA app. My worry is that period between enabling the MFA app where we don't have any 2 factor authentication as we would need to wait for user's to enable the new platform.
My second question links into the first really, if we do need to switch DUO off to enable Microsoft Authenticator, can we force this upon people as we really don't want users to just continue their day not enabling MFA or is this something only they can control?
Lastly I have read some old community posts around SAML not being a feature, I just wanted to get an update on this if possible. We're going to be utilizing Azure AD and will be linking many of our cloud apps via SAML auth and in the future SSO, are we able to do any of this with 1Pass or will we still need to have a separate authentication point at 1Pass? I know about the SCIM bridge which is handy for provisioning and decommissioning but this is more about day to day usage.
1Password Version: 7.6.785
Extension Version: 1.22.3
OS Version: Windows 10 and Multiple Mac Platforms
Sync Type: Not Provided
Referrer: forum-search:mfa replace duo