...
One change that you will encounter if your computer previously had FileVault enabled will be that the FileVault unlock window will have changed to look identical to the standard login window. This change is to ensure that a layer of security by not exposing one half of your login information in the form of the username. Where this might be a little confusing is that the computer does not complete the entire login process from the FileVault unlock window and you will ultimately be entering your credentials twice after a reboot or other startup. Since you should be leaving your Mac on for remote management and application maintenance, you will not encounter this situation often, so the security benefit has been determined to outweigh the slight inconvenience it might cause.
At this time, the only users who will need to go through Duo Multi Factor Authentication will be those who have been granted VPN access to their campus owned Mac desktop. Due to how macOS does not discriminate between local and remote logins, those who utilize VPN access to their campus Mac desktop will have to go through Duo at every login.
Unlocking your active session
...