Using Yubikey with Azure SSO MFA

Yann Saint-Laurent 1 Reputation point
2019-12-17T23:13:19.507+00:00

Hi, I've configured our Business Central On-Prem V13 Test environment for Azure SSO and it works great. I would like to enable the use of Yubico Yubikey for MFA. As many of our employees are not provided with smart phones, we need a way to allow them to signin from their workstation and the business central application with as little friction as possible but with the added security of MFA. It looks like this is supported but I cannot configure it in our Azure portal without paying for AD Premium. If I only want 10-20 users to use the security keys, would I have to license more than those users? Can I add AD Premium to only select users? Also, if these 10-20 users are NOT using any other Office 365 Services, will my scenario work? Thanks for the help

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,473 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. KAREDD-MSFT 406 Reputation points Microsoft Employee
    2019-12-18T06:34:27.693+00:00

    @Yann Saint-Laurent You can purchase Azure AD Premium licenses separately here. Once you purchase any number of Azure AD Premium licenses, your tenant will have all the premium features available.

    You can assign these licenses to the users who are planning to use the premium features and they can use these features.

    It is not mandatory that these users should be using other services like Office 365.

    0 comments