AD FS + Azure MFA for Relying party trust (OWA) - Licensing in Azure

Question

AD FS + Azure MFA for Relying party trust (OWA) - Licensing in Azure

HanakJ 86

Hello,

In this scenario, I have AD FS + Azure AD Connect (Synchronizing users to Azure AD). We have Exchange 2019 (On-premise) in our organization. I log in to the OWA portal through AD FS. I want to use Azure MFA for this OWA application (set in AD FS). I want to ask if users must have a license assigned in Azure AD? I only want to use the Authennticator app.

Thanks

Siva-kumar-selvaraj 15,721 Reputation points

2022-05-12T04:54:11.833+00:00

@HanakJ ,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

Siva-kumar-selvaraj 15,721 Reputation points

2022-05-12T04:54:11.833+00:00

@HanakJ ,
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Siva-kumar-selvaraj 15,721

Hello @HanakJ ,

Thanks for reaching out and apologies for the delayed response.

Azure MFA with ADFS can be used as Primary authentication as well as Secondary authentication and you must have Azure AD premium license assigned to use MFA for on-premises applications and here is feature comparison based on licenses for your reference. Hope this helps.

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

HanakJ 86 Reputation points

2022-04-18T19:12:31.537+00:00

Hi @sikumars-msft,

so every user, who will use Authenticator app must have atleast Azure AD Premium P1.
Siva-kumar-selvaraj 15,721 Reputation points

2022-04-19T04:14:42.707+00:00

@HanakJ ,
Yes, user must have atleast Azure AD premium P1 license to use Azure MFA for on-premises applications (Example: Exchange on-premises federated with ADFS).

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
HanakJ 86 Reputation points

2022-04-25T18:33:53.417+00:00

Hello,

please I have another question. We want to MFA for Enterprise Application "Fortigate SSL VPN", for users sync to Azure AD. Only Authenticator App as a secondary auth. Do We need P1 or is it free?

Thanks
Siva-kumar-selvaraj 15,721 Reputation points

2022-04-26T09:19:37.867+00:00

Yes, in this case Azure AD Free provides security defaults that provide Azure AD Multi-Factor Authentication, only the mobile authenticator app can be used for the authentication prompt, not a phone call or SMS. However, when you use security defaults to prompt users for multi-factor authentication as needed but you don't have granular control of enabled users or scenarios, but it does provide that additional security step.

Reference: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

AD FS + Azure MFA for Relying party trust (OWA) - Licensing in Azure

1 answer

Your answer