In order to configure Azure MFA, we need a few things:
- A valid Azure subscription.
- Azure Global Administrator Privileges.
- Azure AD Federated Setup–Azure AD needs to integrate with AD FS on premises and synchronize identities to Azure. This will be covered in Chapter 17, Azure Active Directory for Hybrid Setup.
- Windows Server 2016 AD FS in local infrastructure.
- Enterprise Admin privileges for AD FS servers to configure MFA.
- Azure Multi-Factor Authentication Enabled–the users sync from on-premises AD need to have MFA enabled. I wrote an article about this before and you can refer to it at http://www.rebeladmin.com/2016/01/step-by-step-guide-to-configure-mfa-multi-factor-authentication-for-azure-users/.
- Windows Azure AD module ...