Copy the GUID in the Directory ID box and save the value. Sign in as an administrator, select the Azure Active Directory icon on the left, then select Properties. You can find your directory ID in the Azure portal.

When you install the MFA extension you will need your Azure Directory ID.Part 2: Gather Information and Install Prerequisites for Azure MFA Extension for MFA Server After a successful installation, restart your server.Run the following command: Install-WindowsFeature -Name npas,npas-policy-server -IncludeManagementTools.Open a Powershell Window with Elevated Permissions.There are several limitations (covered at the bottom of this article) but the setup is straightforward and enhances the ability to use a Hybrid Cloud infrastructure that many businesses are aiming for. This is accomplished by using the RADIUS protocol (for on-premise connectivity to Active Directory Services) and the recently released NPS Extensions for Azure. In the past, organizations had to choose between using multiple MFA services (with several security tokens), leaving part of the infrastructure unsecured, or deploying complicated (and unscalable solutions).Īs of last month, Microsoft released a plug-in for the Network Policy Server that allows on-premise devices to leverage Azure cloud MFA services. One of the biggest issues we (and many other enterprise organizations) are running into is how to leverage cloud Multi-Factor Authentication services for cloud-based products and on-premise services (such as VPN).

Active directory mfa on premise