External MFA

Replace Conditional Access custom controls with external MFA in Entra ID

Conditional Access custom controls are frozen and retire in 2027. Move Duo or another third-party MFA provider to external MFA, switch policies to the MFA grant and remove the custom control.