Mastering Active Directory - Second Edition

Enabling AD FS servers to connect with the Azure Multi-Factor Authentication client

Now, we have the certificate, but we need to tell Azure Multi-Factor Auth Client to use it as a credential to connect with AD FS.

Before that, we need to connect to Azure AD by using Azure PowerShell. We can do that by using the following command:

Connect-MsolService

Then, it will prompt for your login and use your Azure Global Administrator account to connect.

After that, we can pass the credentials by using the following command:

New-MsolServicePrincipalCredential -AppPrincipalId 981f26a1-7f43-403b-a875-f8b09b8cd720 -Type asymmetric -Usage verify -Value $certbase64

In the preceding command, AppPrincipalId defines the Globally Unique Identifier (GUID) for ...