Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud

[Hameed310382]

* We have Azure AD Connect sync On-Premise Active Directory with Azure AD

* We have valid Azure AD Premium license

We would like to know whether we can configure MFA for our VPN. If so which one we need to choose

Azure MFA server or Azure MFA cloud?

Please give me the highlevel steps to accomplish our requirement

[LukeBullimore]

Hi @Hameed310382

The vendor support list for MFA via RADIUS is outlined below.

https://www.paloaltonetworks.com/documentation/global/compatibility-matrix/mfa-vendor-support/mfa-ve...

Documentation for configuring GlobalProtect with 2FA can be found in the GlobalProtect Administrators Guide.

https://www.paloaltonetworks.com/documentation/80/globalprotect/globalprotect-admin-guide/authentica...

Thanks,

Luke.

[Remo]

Hi @Hameed310382

For integrating Azure MFA you need to configure your on premise Azure MFA server as RADIUS server in your configuration. The list mentionned by @LukeBullimore shows only the natively integrated MFA cloud providers. With RADIUS, Paloalto supports almost every MFA software including Azure MFA.

[Hameed310382]

So I need MFA server installed in On-Premise, can't I configure without any server in on-premise

[b_sachitano]

I know this is way old,  but did you ever get this configured?