Register "development" ADFS farm for Azure MFA (against same 365 tenant/domain as "production" farm)

Question

We have two ADFS farms registered in the same Active Directory domain - one as a "development" farm to test configuration changes, theme changes, etc, and one for "production" use. We're currently implementing Azure MFA with ADFS integration, and I wondered if there was any way to have the MFA adapter configured and active on the development farm (for the same domain and same user accounts) even though the development farm isn't the one used for 365 authentication?

Answer 1

Hello @Taylor, David

You can use Azure MFA with your dev ADFS farm only when:

• You have your users synced to Azure AD tenant and they have done Proofup for Azure MFA by visiting https://account.activedirectory.windowsazure.com/Proofup.aspx or via the shortcut https://aka.ms/mfasetup.
• Your ADFS dev environment must be federated with Azure AD, in order to use Azure MFA.

Read more: https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if this information helped you. This will help us and others in the community as well.