topic Setup Azure MFA with Global Protect - NPS/ISE in General Topics

Setup Azure MFA with Global Protect - NPS/ISE

raji_toor — Fri, 27 Nov 2020 00:00:41 GMT

I am building this new but don't have concrete steps to start with. What I understand until now is that we need NPS extension for MFA to work with Azure. We last year moved away from NPS as our radius server to Cisco ISE. So do I have to figure out how to integrate ISE with Azure or do i have no choice but to implement NPS to get this working.

Re: Setup Azure MFA with Global Protect - NPS/ISE

BPry — Fri, 27 Nov 2020 16:56:07 GMT

@raji_toor,

ISE used to support Azure MFA through MFA Server, but Microsoft dropped support for this a while back and has no plans on allowing new deployments. Microsoft essentially mandates NPS for new deployments going forward; I'm not aware of any way you could add Azure MFA on ISE unless you already had an existing MFA Server deployed locally.

Re: Setup Azure MFA with Global Protect - NPS/ISE

raji_toor — Fri, 27 Nov 2020 19:24:01 GMT

Thanks @BPry It seems Microsoft has dropped the on-prem MFA server installation aswell. So i guess my only option is to either use NPS directly/indirectly.