Whats is the best DFA (and free) to combine with LDAP in Palo?

[BigPalo]

Hi,

im looking to configure DFA in GP. We already use LDAP but we want to add another authentication. Any idea?

microsoft is free?

i know google authenticator is.

[BPry]

@BigPalo,

They all work pretty similarly, the "best" is simply one that you can actually get into your environment and enforced so everybody uses it. There's good documentation out there for Google Authenticator, Okta, and Duo are all easy to setup. 

[BigPalo]

Hi,

Someone has Palo Alto GP DFA with Microsoft Authenticator? whats needed?