We are configuring the product AD Self Service Plus.  It appears that if Duo Security is configured as an Authenticator for any policy it becomes a mandatory step in completing enrollment for all policies, even if the specified policy advanced tab chooses to only enforce Security Questions for enrollment.

Any solution to this issue?