The issue was complicated by inability to update Xcode, but Microsoft external support staff had the step-by-step solution, ...
You must have at least one device enrolled in Duo to complete these instructions. We recommend enrolling at least two of your personal devices in Duo. If your primary device becomes unavailable for ...