Migration software
Duo
Suggested in one of our migration playbooks, mainly for Identity and security. Here is what it handles, how it treats key settings, and other tools for the same jobs.
What does Duo handle?
The limits of the built-in tools that Duo gets around, as covered in our playbooks.
AD FS to Microsoft Entra ID migration
- Decide where MFA happens before you cut overDuo is recognised as an MFA method in Entra ID and can satisfy Conditional Access. Running the old Duo custom control alongside it can prompt some users twice.
- If AD FS uses a third-party MFA adapter such as Duo, only Entra MFA applies after conversion.Duo counts as an Entra ID MFA method and can satisfy Conditional Access. Running the old Duo custom control too can prompt some users twice.
How does Duo handle key settings?
From the settings checklists in our playbooks: what Duo carries across.
| Setting | How it handles it | Playbook |
|---|---|---|
| Where MFA happens | Duo counts as an Entra ID MFA method and can satisfy Conditional Access. Running the old Duo custom control too can prompt some users twice. | AD FS to Microsoft Entra ID migration |
Which tools do the same jobs as Duo?
Other tools our playbooks suggest for the same migrations.
We write these notes from the vendor documentation cited in each playbook. Tools cannot pay to be included or to change them. Check the vendor's current documentation and terms before you buy.