topic Re: Using Microsoft Authenticator MFA in Cortex XSOAR Discussions

Using Microsoft Authenticator MFA

michaelsysec242 — Tue, 30 Apr 2024 11:58:03 GMT

Hello LiveComm,

I am working on using MFA for authentication to xsoar on a server that has Active Directory (On-Prem) SAML authentication already in use. The use case is to require the user to authenticate using the Microsoft Authenticator app. I have searched around and have not found any documentation regarding this except for DUO though this is not relevant, does anyone have an idea of what I can do to make this work?

Many thanks,

Michael Rose

Re: Using Microsoft Authenticator MFA

dyanuck — Tue, 30 Apr 2024 14:23:13 GMT

Michael,

Per XSOAR documentation, Okta, MS Azure, and ADFS are supported for SAML authentication. Here is the documentation for ADFS, which is the relevant documentation for on-prem AD. Regarding Microsoft Authenticator specifically, I would confirm with Microsoft how to integrate this into the authentication process, as initial investigation shows that a separate on-prem Multi-Factor authentication server will have to be configured, or a cloud-based Azure/Entra Multi-Factor server, to integrate with ADFS.