Can custom PAM (Pluggable Authentication Module) libraries work with Bastion SSH?

Question

I have provisioned a server for one of our team, who want to have MFA enabled via google-authenticator-libpam on the guest VM's themselves.

Once configured, Azure bastion no longer works.

Is having user interaction during SSH login not supported by Azure Bastion, or is there a special config?

Answer 1

@Stephen Baker Azure Bastion does not support MFA. However, if integrated with Azure AD, you can implement it through AD as given here in the document- https://learn.microsoft.com/en-us/azure/bastion/security-baseline#im-4-use-strong-authentication-controls-for-all-azure-active-directory-based-access

Hope this helps. Please let us know if you have further questions/concerns. Thank you!

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.