Azure AD and MFA

Jackie Butler 236 Reputation points
2020-09-17T19:12:09.053+00:00

We currently are using Azure AD for O365 and will eventually do the AD connect.
With the MFA function does the MFA require you to log in on a desktop then brings up the second authentication?
Does MFA protect the desktop or only the O365 apps?

Azure Active Directory Domain Services
Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,758 questions
{count} votes

Accepted answer
  1. Andy David - MVP 110.7K Reputation points MVP
    2020-09-17T19:19:33.683+00:00

    MFA protects the 365 apps and portal access so you wont prompted till you access the Azure/365 portals or apps.

    MFA Desktop protection can managed with Windows Hello:
    https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-identity-verification

    or with Virtual Desktop:

    https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa

    No comments

1 additional answer

Sort by: Most helpful
  1. Jackie Butler 236 Reputation points
    2020-09-17T19:21:24.753+00:00

    If the device doesn't have windows hello can MFA still be used to protect the desktop at sign in?