Hello, will the NPS extension for Azure MFA be deprecated? Or is that only for the Azure MFA server on premise?

@Sercan Yazici , The NPS extension for Azure MFA is not deprecated and there are no upcoming deprecation plans that I'm aware of. Like you mentioned, the deprecation is only for Azure MFA Servicer on premises and beginning September 2024, Azure Multi-Factor Authentication Server deployments will no longer service multi-factor authentication (MFA) requests. The NPS extension was created as a step to move towards Azure MFA and away from MFA Server. The recommendation is to migrate to the NPS Extension and Azure MFA using the migration guide. https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-migrate-mfa-server-to-azure-mfa-user-authentication Let me know if this helps and if you have further questions. If the information helped you, please Accept the answer . This will help us as well as others in the community who may be researching similar information.

AZURE MFA NPS extension deprecated?

Accepted answer

Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee

2023-05-02T01:48:13.1+00:00

@Sercan Yazici ,

The NPS extension for Azure MFA is not deprecated and there are no upcoming deprecation plans that I'm aware of. Like you mentioned, the deprecation is only for Azure MFA Servicer on premises and beginning September 2024, Azure Multi-Factor Authentication Server deployments will no longer service multi-factor authentication (MFA) requests.

The NPS extension was created as a step to move towards Azure MFA and away from MFA Server.

The recommendation is to migrate to the NPS Extension and Azure MFA using the migration guide. https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-migrate-mfa-server-to-azure-mfa-user-authentication

Let me know if this helps and if you have further questions.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information.
Please sign in to rate this answer.
Sercan Yazici 40 Reputation points

2023-05-02T03:57:39.1233333+00:00

Thank you for your answer. We don't have the mfa server at the moment. I am just wondering if it is possible to make use of Azure mfa (push notification or otp code) when I login to my windows 11 client if I configure the nps extension on our radius server? Login direct on my machine without rdp and getting a mfa prompt before I can login. Is that possible?

Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee

2023-05-31T22:25:20.7166667+00:00

NPS with VPN login would fit your scenario, assuming these are still Active Directory accounts (and not local machine accounts, since local machine accounts would not have these MFA capabilities). https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-vpn

For interactive logon if you are looking for MFA along with the password, it may make the most sense to go with Windows Hello for Business. It replaces passwords with strong two-factor authentication on devices. This authentication consists of a type of user credential that is tied to a device and uses a biometric or PIN and satisfies Azure MFA requirements.

https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

AZURE MFA NPS extension deprecated?

0 additional answers

Your answer