Azure MFA NPS Extension sign-in logs in Azure

Question

Azure MFA NPS Extension sign-in logs in Azure

Jinseng 41

We have the NPS MFA Extension enabled and working. I know there are event logs and log files locally on the NPS server. But is there a way to get the MFA request to log to the Azure AD Sign-in logs in the Azure Portal? We want consolidated logging, and to not have to check multiple locations to gather information.

Our setup is using native AAD accounts and AADDS to configure NPS and MFA for Remote Desktop gateway server.

Thanks.

Shashi Shailaj 7,631 Reputation points Microsoft Employee Moderator

2021-09-28T14:16:36.997+00:00

@Jinseng , I think if you are looking for security log consolidation , Azure Sentinel would be the way to go but I will check more internally and will let you know if I find anything else.
Jinseng 41 Reputation points

2021-09-28T17:42:03.263+00:00

We may have to look into that. I was hoping to not have to add another subscription service if possible. It seems like Azure AD should log MFA requests along since Sign-ins, but I haven’t seen it doing that.

Thanks.

1 answer

Your answer

Shashi Shailaj 7,631 Reputation points Microsoft Employee Moderator

2021-09-28T14:16:36.997+00:00

@Jinseng , I think if you are looking for security log consolidation , Azure Sentinel would be the way to go but I will check more internally and will let you know if I find anything else.
Jinseng 41 Reputation points

2021-09-28T17:42:03.263+00:00

We may have to look into that. I was hoping to not have to add another subscription service if possible. It seems like Azure AD should log MFA requests along since Sign-ins, but I haven’t seen it doing that.

Thanks.

Answer 1

Michiel Saat 0

https://www.youtube.com/watch?v=f00B2t0gTBc

User --> Sign-in logs:

Filter "Resource ID": radius

AzureMFA extension for on-premise NPS server and view logging in Azure portal.

Share via

Azure MFA NPS Extension sign-in logs in Azure

1 answer

Your answer