DUO 2FA when using out-of-band is infringing on StrikeForce Tech's IP. They are in litigation with SFT and DUO's IPR was denied by PTAB! Any MFA/2FA OOB being done is clearly SFT IP, which PTAB just recently confirmed.

I wonder if DUO has advised Cisco about this?