I have Duo in our environment. Authenticator not required.