MFA for VPN

Question

MFA for VPN

Michael P. Boscaino 0

Hi everyone! I was wondering if anyone knows how to add a 2 step MFA to the VPN login?

Crystal Lee Morgan 380 Reputation points

2023-12-20T16:50:58.1433333+00:00
To add a two-step MFA to the VPN login, you can follow the instructions provided by Microsoft 1. Here are the steps:

Open the Azure VPN - Properties page and configure sign-in settings.

Set “Enabled for users to sign-in?” to “Yes”.

Set “User assignment required?” to “Yes” if you want to limit sign-in to only users that have permissions to the Azure VPN.

Save your changes.

Once you have enabled two-step verification, you will receive a security code to your email, phone, or authenticator app every time you sign in on a device that isn’t trusted 1. This will help increase the security of your VPN login.

I hope this helps! Let me know if you have any other questions.
Michael P. Boscaino 0 Reputation points

2023-12-20T18:18:23.57+00:00

Hi Crystal. I am not seeing the "Configure Sign in Settings. i have attached a screenshot
Crystal Lee Morgan 380 Reputation points

2023-12-20T18:30:31.5633333+00:00
To enable two-step verification for your Azure VPN Gateway, you can follow these steps:

Open the Azure portal and navigate to your Azure VPN Gateway.

Click on the Properties tab and scroll down to the Security section.

Click on the “User assignment required?” option and set it to “Yes”.

Click on the “Enabled for users to sign-in?” option and set it to “Yes”.

Click on the Save button to save your changes.
Michael P. Boscaino 0 Reputation points

2023-12-20T19:31:23.2133333+00:00

HI. I am not seeing that either? Would you willing to do a quick screen share?

https://teams.microsoft.com/l/meetup-join/19:meeting_NzcxZDA5NjYtNmJkYi00YzhiLWJmNDgtZmQxZThhNGJiMjll@thread.v2/0?context=%7B%22Tid%22:%22a28f074a-d4ad-4f59-a5b2-54143da57ee3%22,%22Oid%22:%221216e46b-182c-4a84-82f0-cd2a80a5f62e%22%7D
ChaitanyaNaykodi-MSFT 27,476 Reputation points Microsoft Employee Moderator

2023-12-29T04:37:46.0633333+00:00

@Michael P. Boscaino

Thank you for reaching out.

I understand you wish to configure MFA for your Azure VPN. If you are using Azure VPN client to login into the VPN. You can the documentation here to Enable Microsoft Entra multifactor authentication (MFA) for VPN users.

Hope this helps! Please let me know if you have any questions. Thank you!
Philipp Durrer 20 Reputation points

2024-09-03T13:03:51.53+00:00

I was successful adding MFA requirement to Azure VPN but I'd like it to request an MFA code on each connection instead of the Azure VPN Client application caching the login details. How would that be possible?

1 answer

Your answer

Crystal Lee Morgan 380 Reputation points

2023-12-20T16:50:58.1433333+00:00

To add a two-step MFA to the VPN login, you can follow the instructions provided by Microsoft 1. Here are the steps:

Open the Azure VPN - Properties page and configure sign-in settings.

Set “Enabled for users to sign-in?” to “Yes”.

Set “User assignment required?” to “Yes” if you want to limit sign-in to only users that have permissions to the Azure VPN.

Save your changes.

Once you have enabled two-step verification, you will receive a security code to your email, phone, or authenticator app every time you sign in on a device that isn’t trusted 1. This will help increase the security of your VPN login.

I hope this helps! Let me know if you have any other questions.
Michael P. Boscaino 0 Reputation points

2023-12-20T18:18:23.57+00:00

Hi Crystal. I am not seeing the "Configure Sign in Settings. i have attached a screenshot
Crystal Lee Morgan 380 Reputation points

2023-12-20T18:30:31.5633333+00:00

To enable two-step verification for your Azure VPN Gateway, you can follow these steps:

Open the Azure portal and navigate to your Azure VPN Gateway.

Click on the Properties tab and scroll down to the Security section.

Click on the “User assignment required?” option and set it to “Yes”.

Click on the “Enabled for users to sign-in?” option and set it to “Yes”.

Click on the Save button to save your changes.
Michael P. Boscaino 0 Reputation points

2023-12-20T19:31:23.2133333+00:00

HI. I am not seeing that either? Would you willing to do a quick screen share?

https://teams.microsoft.com/l/meetup-join/19:meeting_NzcxZDA5NjYtNmJkYi00YzhiLWJmNDgtZmQxZThhNGJiMjll@thread.v2/0?context=%7B%22Tid%22:%22a28f074a-d4ad-4f59-a5b2-54143da57ee3%22,%22Oid%22:%221216e46b-182c-4a84-82f0-cd2a80a5f62e%22%7D
ChaitanyaNaykodi-MSFT 27,476 Reputation points Microsoft Employee Moderator

2023-12-29T04:37:46.0633333+00:00

@Michael P. Boscaino

Thank you for reaching out.

I understand you wish to configure MFA for your Azure VPN. If you are using Azure VPN client to login into the VPN. You can the documentation here to Enable Microsoft Entra multifactor authentication (MFA) for VPN users.

Hope this helps! Please let me know if you have any questions. Thank you!
Philipp Durrer 20 Reputation points

2024-09-03T13:03:51.53+00:00

I was successful adding MFA requirement to Azure VPN but I'd like it to request an MFA code on each connection instead of the Azure VPN Client application caching the login details. How would that be possible?

Answer 1

Michael Boscaino 0

I am not using azure VPN but I would love to make the change but I do not have a background in this so it is all very confusing for me. Someone from the azure team helped me get it set up but I am not able to contact anyone. i love the service but when it comes to making any changes, there are no service options.

Share via

MFA for VPN

1 answer

Your answer