The term 'New-AdfsAzureMfaTenantCertificate' is not recognized as the name of a cmdlet, function, script file, or operable program

Kani 61 Reputation points
2020-11-16T07:45:24.917+00:00

I am trying to enable Azure MFA for one of our on-premise Sharepoint sites. I am following below answer which I raised some time back.

https://learn.microsoft.com/en-us/answers/questions/142206/integrate-mfa-with-adfs-with-sharepoint-fba-authen.html

In this process, I have failed to create the ADFS certificate in our ADFS server. I receive the following error.

39985-error-adfs-certificate.png

Would you be able to give me a suggestion to resolve this error. Many thanks

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,189 questions
SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,799 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,466 questions
0 comments
Accepted answer
  1. AmanpreetSingh-MSFT 56,306 Reputation points
    2020-11-16T14:50:13.647+00:00

    Hi @Kani · ADFS on Windows Server 2012 doesn't support Azure MFA which is why it is failing to run New-AdfsAzureMfaTenantCertificate. You need to use either Windows server 2016 or 2019 OS for this to work.

    This is documented in below paragraph of this doc: Configure Azure MFA as authentication provider with AD FS

    Unlike with AD FS in Windows Server 2012 R2, the AD FS 2016 Azure MFA adapter integrates directly with Azure AD and does not require an on premises Azure MFA server. The Azure MFA adapter is built in to Windows Server 2016, and there is no need for additional installation.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 95,341 Reputation points MVP
    2020-11-16T08:37:53.23+00:00

    Which ADFS version is that? Afaik the cmdlet is only available on AD FS v4/Windows Server 2016, older version do not support Azure MFA as provider anyway.

    2 people found this answer helpful.
  2. Leon Laude 85,651 Reputation points
    2020-11-16T07:55:12.437+00:00

    Hi @Kani ,

    This error simply indicates that your PowerShell does not recognize the New-AdfsAzureMfaTenantCertificate PowerShell cmdlet, make sure you have imported the ADFS PowerShell module, this module should also be found if you run the PowerShell cmdlet on your ADFS server.

    ----------

    (If the reply was helpful please don't forget to upvote or accept as answer, thank you)

    Best regards,
    Leon

    1 person found this answer helpful.