Skip to main content

Questions tagged [azure-mfa]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
39 views

RD Gateway passing through NPS for RADIUS authentication

I'm trying to setup MFA for RDP connections using privacyIDEA.I've already setup an RDP gateway as recommended in this guide: Use RADIUS authentication with Remote Desktop Services The goal is to send ...
Lalaman S's user avatar
0 votes
0 answers
19 views

NPS extension for Azure MFA timestamp issue

I'm trying to setup VPN auth via RADIUS using Windows Server NPS and Azure MFA NPS extension. Here's the error I am getting: NPS Extension for Azure MFA: CID: 104def04-3db0-47d6-a82f-8b9249eca19c: ...
kyle's user avatar
  • 23
0 votes
0 answers
86 views

AD FS doesn't do MFA enrollment properly for non-English browsers

We have an on-premise AD FS 2019 server for SSO, connected to Azure AD (sigh, now Entra ID) for MFA. We closely followed this documentation when setting things up, and it has worked well for some time ...
Joel Coel's user avatar
  • 13k
1 vote
2 answers
446 views

New MS Entra MFA users with AD FS not correctly bypassing MFA requirement to allow initial ProofUp

I'm preparing to onboard a new set of users for MFA authentication with Entra/AD FS, and running into some trouble (thankfully still during the testing phase!) The environment is an on-premise AD/AD ...
Joel Coel's user avatar
  • 13k
0 votes
1 answer
167 views

How to detect Basic authentication as fall back auth method - Exchange 2016 on prem + Azure MFA

we have configured Azure MFA in our Exchange on-prem 2016. Unfortunately, the MFA control can easily bypass by using an old email client (Outlook 2010 for example). This is a known issue and the ...
YaKs's user avatar
  • 131
1 vote
0 answers
745 views

Bypassing Network Policy Server with Azure AD Extension

I hope someone can help guide me here! We have a RDS environment and introduced Azure MFA and built it successfully using the following guide here: https://learn.microsoft.com/en-us/azure/active-...
cOzMaTiC's user avatar
  • 168
0 votes
1 answer
1k views

How to change Microsoft Azure MFA from "enter code" to "approve request"

We have a M365 tenant with MFA enforced for all users. We can use either text message (SMS) or Microsoft Authenticator app on smartphone with a Time Based code (6 digit TOTP code). We would like for ...
JFL's user avatar
  • 2,028
0 votes
2 answers
491 views

OTP before password with pam_radius and NPS

I have successfully configured pam_radius on a Ubuntu client so that users are asked for an OTP. The radius server is an NPS with Azure MFA extension. The OTP is checked against Azure. It works well, ...
francisaugusto's user avatar
0 votes
1 answer
649 views

Azure Conditional Access - Exclude MFA for Specific Resource

Is there a way to exclude a conditional access policy from MFA when accessing a specific resource? In this case it is when accessing a SQL managed instance. Everything else has to apply MFA.
RLBChrisBriant's user avatar
1 vote
2 answers
66 views

Lost OTP tokens - best practices? [closed]

We're in the process of deploying TOTP tokens to all staff across the organisation via Azure AD. We strongly encourage all staff to use Microsoft Authenticator as the default, and those with company ...
ubercam's user avatar
  • 111
0 votes
1 answer
90 views

Can I have a unique MFA for different Azure Subscriptions with one Tenant?

Currently I am looking at a configuration of a single Azure Tenant with multiple Subscriptions. Prod and non-Prod resources are separated by Subscriptions. I am looking to understand how I could ...
Steven K7FAQ's user avatar
0 votes
0 answers
616 views

When connecting to our LAN via an VPN, MS Outlook repeatedly prompts for passwords

For an email account that is in Exchange Online, if a user connects to our VPN, and then tries to open Outlook (the Windows app), they get prompted to authenticate with Exchange Online. But it fails, ...
Kshaeta's user avatar
1 vote
1 answer
51 views

Azure AD B2C and aka.ms/mfasetup

I have an Azure AD tenant and I created an Azure AD B2C tenant for an app that I am building. The "short link" for MFA setup is https://aka.ms/mfasetup but that allows me to configure MFA ...
Glenn Ferrie's user avatar
1 vote
0 answers
68 views

Use Nps Server as MFA middleware

My company uses NPS Server and Microsoft Authenticator app to facilitate two factor authentication for RDP connections. We are Windows Server 2016 and Azure Active Directory. Would it be possible to ...
Ako's user avatar
  • 111
-1 votes
1 answer
6k views

Windows Server 2016 multi-factor authentication for RDP with Azure AD

We want to require Multi-factor Authentication for RDP login (and local login) going forward on our Windows Server systems. Currently all of our Windows Server systems are Windows Server 2016. We ...
A X's user avatar
  • 529
0 votes
1 answer
390 views

Will IP changes trigger reauthentication for Microsoft Conditional Access MFA?

I am currently implementing Azure Conditional Access for a large group of users. Everything looks good, but we are getting complaints that people need to reauthenticate to often. We have configured ...
roebenk's user avatar
1 vote
1 answer
3k views

RD gateway with Azure MFA

I followed this GUIDE https://docs.microsoft.com/en-ca/azure/active-directory/authentication/howto-mfa-nps-extension-rdg And the issue is all my users are able to login without getting prompted for ...
SAM's user avatar
  • 11
1 vote
0 answers
92 views

Disable Azure/Office MFA on all users

We have created a new Office Tenant. Now all users are required to use the Multi Factor Authentication. How can I disable this policy? I know that I can't disable it for gloabl admins. That's fine - ...
Twiebie's user avatar
  • 111