Multi-Factor Authentication Configuration Create
Multi-Factor Authentication(MFA) combines four independent credentials. The credentials are Name (which must be unique to the system), API Host, Integration Key, and Secret Key. The goal of MFA is to create a layered defense making it more difficult for an unauthorized person(s) to access the system.
To enable MFA using Duo, you must first create a Duo account. You can get a free trial for a Duo Beyond account at Duo Security.
Once you have a Duo account set up, log in to the Duo admin dashboard. Click the ‘Applications’ tab and select ‘Protect an application’. In the search bar, search for Auth API and select the ‘Protect this Application' link. Now you will be shown your new API hostname, integration key, and secret key. These will be used to create your MFA configuration.
Navigation: Users & Groups --> Users --> Multi-Factor Authentication --> Create (toolbar)
For additional information see Duo Multi-Factor Authentication