AZURE MFA NPS extension deprecated?

Question

AZURE MFA NPS extension deprecated?

Sercan Yazici 40

Hello,

will the NPS extension for Azure MFA be deprecated? Or is that only for the Azure MFA server on premise?

Marilee Turscak-MSFT 29,291 Reputation points Microsoft Employee

2023-06-02T22:29:06.5133333+00:00

@Sercan Yazici ,

Just checking to see if you were able to get the information you were looking for? If the information helped you, please remember to Accept the answer so that others in the community researching similar questions can more easily find a solution. Otherwise please let me know if you have further questions!

Marilee Turscak-MSFT 29,291 Reputation points Microsoft Employee

2023-06-02T22:29:06.5133333+00:00

@Sercan Yazici ,

Just checking to see if you were able to get the information you were looking for? If the information helped you, please remember to Accept the answer so that others in the community researching similar questions can more easily find a solution. Otherwise please let me know if you have further questions!

Answer 1

Marilee Turscak-MSFT 29,291 Microsoft Employee

@Sercan Yazici ,

The NPS extension for Azure MFA is not deprecated and there are no upcoming deprecation plans that I'm aware of. Like you mentioned, the deprecation is only for Azure MFA Servicer on premises and beginning September 2024, Azure Multi-Factor Authentication Server deployments will no longer service multi-factor authentication (MFA) requests.

The NPS extension was created as a step to move towards Azure MFA and away from MFA Server.

The recommendation is to migrate to the NPS Extension and Azure MFA using the migration guide. https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-migrate-mfa-server-to-azure-mfa-user-authentication

Let me know if this helps and if you have further questions.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information.

Sercan Yazici 40 Reputation points

2023-05-02T03:57:39.1233333+00:00

Thank you for your answer. We don't have the mfa server at the moment. I am just wondering if it is possible to make use of Azure mfa (push notification or otp code) when I login to my windows 11 client if I configure the nps extension on our radius server? Login direct on my machine without rdp and getting a mfa prompt before I can login. Is that possible?
Marilee Turscak-MSFT 29,291 Reputation points Microsoft Employee

2023-05-31T22:25:20.7166667+00:00

NPS with VPN login would fit your scenario, assuming these are still Active Directory accounts (and not local machine accounts, since local machine accounts would not have these MFA capabilities). https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-vpn

For interactive logon if you are looking for MFA along with the password, it may make the most sense to go with Windows Hello for Business. It replaces passwords with strong two-factor authentication on devices. This authentication consists of a type of user credential that is tied to a device and uses a biometric or PIN and satisfies Azure MFA requirements.

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

AZURE MFA NPS extension deprecated?

0 additional answers

Activity