This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(99.2, 11%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENG%3C/text%3E%3C/svg%3E)
Hi I have a problem with my VPN.
I create a VPN in Windows Server and a NPS to autenticate users.
I also have a MFA setup and works. The problem is that VPN only work with Authenticator, and dont work with SMS token.
A receive a message with a PIN, but dont have a place to put..
Anyone can help??
anonymous user-8631
Thank you for your post!
Any additional information would be greatly appreciated.
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 73%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESQ%3C/text%3E%3C/svg%3E)
Your question is more related with MFA part, we will remove windows-server-windows-server-security tag. Thank you!
Hi, yes I already change in aka.ms my preference.
The situation is that this only work with microsoft autentication on the phone. Who dont have this installed, dont enter on the VPN.
The tuturial that I fallow is this:
https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-vpn
Can you help me?
anonymous user-8631
Thank you for the quick response!
It sounds like your MFA set up works, but the main problem is that the VPN setup only works with the Authenticator app, and not with an SMS token?
Have you looked into any of the below troubleshooting guides?
Troubleshooting RADIUS
Troubleshooting guide
I also reached out to my team regarding this and since this process requires a lot of NPS/on-prem AD configuration, I've added the "windows-active-directory" tag to this thread so their community can take a look into this issue as well.
Thank you for your time and patience throughout this issue.
Yes, thats it! VPN works, but only wirh the Authenticator App, not with SMS token.
If I unnistall app, I receive a SMS token, but I havent a place to put it. So I cant log into VPN without Authenticator App,
I receive a SMS token, but there is no Popup to insert that..
Please help...
Yes, I already look into this troubleshooting sites.
It works, but onlu with AUthenticator App... If I dont have this aplication I receive a SMS with a token, but I dont have a place to insert this...
Only works with authenticator..
Please help me!
anonymous user-8631
Thank you for the quick response and confirmation!
From the Auth flow I see that you can use phone call, text message, or mobile app, but if there's no place to type in the SMS verification code, I believe this has the potential to be a by design issue.
Later in the documentation the Authenticator App is also used.
I've reached out to our engineering teams regarding this issue and will update as soon as possible.
Thank you for your time and patience throughout this issue.
The problem is that there is no place to choose if this authenticates from App or via SMS.
~
Hi anonymous user-8631
As far as I know, Microsoft CHAP Version 2 and EAP only supports phone call or mobile app notification. I found a threat regarding this:
The same is valid for RD Gateway:
Supported methods are: Phone call, Authenticator app with notification.
Unsupported methods are: SMS, Authenticator app with PIN.
https://learn.microsoft.com/en-us/answers/questions/44596/azure-mfa-nps-extension-rds-gatway-method.html
Cheers, Al
Hi, and there is any solution for this??
In this article said that If I change my radius to PAP, it will work, but I already changed,and nothing new happen... This is the same.. only work with the App. If I unistall the App dont work...
Hi, And there is any solution?
anonymous user-8631
I've enabled your subscription for a one-time free technical support request so our support engineers can take a closer look into this issue. Once you arrive at a solution/workaround, please feel free to update your thread with the answer so others from the community who're experiencing a similar issue can easily find the solution.
Thank you for your time and patience throughout this issue!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 27%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELD%3C/text%3E%3C/svg%3E)
anonymous user-8631
Hi, Have you found a solution to this problem?
NO, there is no solution. SMS dont work at all in windows VPN
I have the same problem in the case of using TOTP, and I have no solution either.
No Solution, this only work with Authenticator.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 26%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAW%3C/text%3E%3C/svg%3E)
Hi, @JamesTran-MSFT , are you going to resolve this problem soon?
It works perfectly with Office 365, but not with VPN. It should work the same...
I get a code in SMS but there is no place to put it in.
Best regards