Today I earned my "Microsoft Security, Compliance, and Identity Fundamentals: Describe the concepts of security, compliance, and identity" trophy!
In this course I was able to demonstrate setting up 5 Entra ID's across a domain and configured 2 SaaS products with single sign (SSO). I was able to demonstrate the benefits of a single identity authority and enabled 2FA on end point devices using the Duo Security app.
This setup meant the end point devices I setup used Microsoft Entra ID to authenticate and then Duo 2FA using the Duo smart phone application (with offline access disabled) to provide an additional layer of security through multi factor authentication.