5-person company about to hire more and we're on M365:

Okta or Duo?

[If you say Azure AD FS, I'll make you read the eight-year-old docs for it til you get galaxy brain]

@Tarah Neither, use native Entra ID and WHfB or FIDO keys for MFA. ADFS not required. On-premises anything not required.