This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 98%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Do we have any step by step configuration guide for this one ? please share most recent version .
We are using Azure AD (Free version)
Will it work? (In the licenses section of the link you posted it only talks about Azure AD P1 and P2)
The NPS Extension for Azure AD Multi-Factor Authentication is available to customers with licenses for Azure AD Multi-Factor Authentication (included with Azure AD Premium P1 and Premium P2 or Enterprise Mobility + Security). Consumption-based licenses for Azure AD Multi-Factor Authentication, such as per user or per authentication licenses, aren't compatible with the NPS extension.
Hello @dirkdigs
Please read the following documentation (Updated April 15, 2022):
Integrate your existing Network Policy Server (NPS) infrastructure with Azure AD Multi-Factor Authentication
https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension
-------------------------------
If this is helpful please mark as correct answer.
Hello @dirkdigs
You should be able to use MFA for your entire organization with security defaults (is available for free tier). You as an admin may have to purchase a P2 license to turn on the functionality.
Please correct me if I am wrong (anyone) as I do not have a free tenant and this is purely reciting information from Microsoft Learn.
-----------------------------
Please remember to mark the original answer as correct if you find it helpful.
OK i guess my question is more specific to setting up the (or registering) the MFA extension for Azure on my Microsoft NPS server.
I'm not sure if we can do this with only the free tier of Azure AD.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Hi @dirkdigs ,
You do need either a Premium P1 or P2 license because MFA is sold as part of those licenses, and in order to be eligible to use Azure AD MFA NPS Extension you need to licensed for Azure MFA via Azure MFA License. New customers may no longer purchase Azure Multi-Factor Authentication as a standalone offering.
You also need to have the "Azure Multi-Factor Auth Client" application registered within your tenant.
There are additional instructions in this thread as well: https://learn.microsoft.com/en-us/answers/questions/706341/azure-ad-nps-extension-license-confusion.html
The current NPS Setup guide is the only official guide right now, though there are some useful videos and blog posts that also show the setup. For example, this blog post from StarWind software.
-
If the information was helpful to you, please mark as answer. This will help us and other community members as well.