Get-NetFirewallRule -DisplayGroup 'Network Policy Server' | where DisplayName -like '*RADIUS*' | Set-NetFirewallRule -Service AnyĪzure MFA With Microsoft NPS: Domain (on Premises and Azure AD) The quickest simplest method is to use PowerShell. So I’ve pretty much covered this half a dozen times before, but for completeness I’ll quickly run though setting up NPS / NPAS. You can re-force that, from the following screen if you wish.Īzure MFA With Microsoft NPS: Deploying NPS

Now your user needs to have MFA enabled, (this should be pretty obvious), to use the Microsoft authenticator application the USER chooses that method of authentication, when you enable MFA for them (the first time they login). Well yes you can, but we are not authenticating to office 365 are we?īelow you can prove the licence is allocated in Office 365 “But I can use the Authenticator App with my Office 365 subscription?” The remote user needs EITHER an Azure P1 License, or a Microsoft 365 license. Azure MFA With Microsoft NPS Pre-Requisites Once it has satisfied that requirement, it will authenticate against my Azure AD, which will trigger an MFA event, (in my case send a request to the Microsoft Authenticator Application on my Android Phone).

So, I’m using RADIUS auth (above) on my NPS server, and it’s simply checking the authenticating user is a member of a domain security group. It turns out if you want to enable Azure MFA with Microsoft NPS it’s actually quite simple. I was in a forum last week and someone asked, “Can I enable Azure MFA, on my RADIUS server, to secure access to my switches and routers etc”.

Azure radius