If the user is in Duo's backend; they are considered partially enrolled, so the allow unenrolled without MFA policy doesn't work. They need to have Bypass status from somewhere until enrollment emails are sent.
If the user is in Duo's backend; they are considered partially enrolled, so the allow unenrolled without MFA policy doesn't work. They need to have Bypass status from somewhere until enrollment emails are sent.
Thank you! Your comment has been submitted for approval.