You didn't read all the responses. The Duo flow is designed almost exclusively for use with the MFA login flow, you can't just enable it by itself. -- Scott