MFA number matching with NPS and RDS Gateway

Question

My customer is using a RDS gateway server with NPS for the Multi Factor Authentication. When users are logging in they get a push in the Authenticator app.

When a user logs in on Outlook Webmail, the Authenticator app asks for a number (number matching).

In this article it looks like there is a way to enable number matching on the RDS Gateway: https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-number-match

I cannot get this working. Is this possible at all? If yes, is there some more extensive manual to achieve this?

Answer 1

@Info - Envodi ICT Solutions

As mentioned in the article, there is a RegEdit for "OVERRIDE_NUMBER_MATCHING_WITH_OTP = FALSE"  to allow fall back to Approve/Deny for the RDS Gateway. PAP protocol must be used for TOTP. https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-number-match

RDG only supports Phone Call or Push Notification. Radius Auth in general, which would include the NPS Extension, does not support Number Matching.

Let me know if this helps and if you have further questions.

If the information helped you, please Accept the answer. This will help us as well as