Use MFA to activate PAM

Question

Hi,

I'm trying to activate MFA to use with Microsoft PAM. I'm referring to this link to activate it: https://learn.microsoft.com/en-us/microsoft-identity-manager/pam/use-azure-mfa-for-activation

However, the steps outline in the link was not consistent with the navigation in the Azure portal. Here is the step:

1. Open a web browser and connect to the Azure classic portal as an Azure subscription administrator.
2. In the bottom left hand corner, click New.
3. Click App Services > Active Directory > Multi-Factor Auth Provider > Quick Create.
4. In the Name field, enter PAM, and in the Usage Model field, select Per Enabled User. If you have an Azure AD directory already, select that directory. Finally, click Create.

I cannot find the "Quick Create" button in the MFA blade. Screenshot as attached. Can someone points me to the right direction on how to set this MFA with PAM? Appreciate the help.

Regards,

AK

Answer 1

@Abdul Khafiq
Thank you for your question! Have you followed the important notice stating to follow this documentation - Use Azure Multi-Factor Authentication Server to activate PAM or SSPR in order to use MFA to activate PAM?

The documentation is outdated, since it's referring to the Azure Classic Portal which was retired between 2017 to 2018. If you'd like to get this document updated, I'd recommend creating a GitHub issue for the author of this doc using the GitHub feedback button at the bottom of the page.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Hi James,

I have followed the notice. But it seems the following article also was outdated. I stuck on Step 1 on this article.

Answer 3

@Abdul Khafiq
Thank you for the quick response! From the screenshot you sent me, as of July 1, 2019, Microsoft will no longer offer MFA Server for new deployments and trial tenants. New customers who would like to require multi-factor authentication from their users should use cloud-based Azure Multi-Factor Authentication.

When you click on the "Click here for more information." option, you'll follow the documentation, and get to the same message under the "Download the MFA Server" section.

You'll have to follow the prompt to get started with cloud-based MFA - Tutorial: Secure user sign-in events with Azure AD Multi-Factor Authentication.

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.