AD FS + Azure MFA for Relying party trust (OWA) - Licensing in Azure

HanakJ 86 Reputation points


In this scenario, I have AD FS + Azure AD Connect (Synchronizing users to Azure AD). We have Exchange 2019 (On-premise) in our organization. I log in to the OWA portal through AD FS. I want to use Azure MFA for this OWA application (set in AD FS). I want to ask if users must have a license assigned in Azure AD? I only want to use the Authennticator app.


Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,214 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,162 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Siva-kumar-selvaraj 15,586 Reputation points

    Hello @HanakJ ,

    Thanks for reaching out and apologies for the delayed response.

    Azure MFA with ADFS can be used as Primary authentication as well as Secondary authentication and you must have Azure AD premium license assigned to use MFA for on-premises applications and here is feature comparison based on licenses for your reference. Hope this helps.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.