Azure MFA extension

testuser7 286 Reputation points
2023-03-16T14:30:23.9433333+00:00

Hello,

We know that we can use Azure MFA from NPS-server as there is NPS Extension that we can install on NPS-server

The NPS extension acts as an adapter between RADIUS and cloud-based Azure AD Multi-Factor Authentication to provide a second factor of authentication for federated or synced users. Nicely explained at https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension

My question is, is this Azure-MFA Extension binary kind of generic extension that can be plugged into any server ??

For eg., I have a web-server like Tomcat or Weblogic where my app-code is deployed. I want to invoke this extension from the app code. Is it possible ??

Thanks.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator
    2023-03-20T23:55:42.43+00:00

    @testuser7

    Thank you for your post and I apologize for the delayed response!

    From your issue, I understand that you'd like to know if the Azure MFA NPS Extension can be installed onto any server, for example a web server (Tomcat, Weblogic) since you'd like to invoke this extension from your application's code.

    From my understanding, after reading through the NPS with Azure AD MFA documentation that you shared - it looks like installing the NPS Extension onto a web server might not be possible, since your web server will need additional libraries, Windows Server 2012 or above, met networking requirement, and more. For more info - NPS extension Prerequisites.


    Update:

    I reached out to our Azure AD MFA team so they can look into your issue, and the recommendation would be to install the extension on a dedicated server. It isn't recommended to install the NPS extension on a web server due to potential capacity, performance, or networking configuration issues. However, if your web server doesn't run into these problems, having the NPS extension on your web server may work.

    If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.


    If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.