Mastering Active Directory - Second Edition

Prerequisites

In order to configure Azure MFA, we need a few things:

• A valid Azure subscription.
• Azure Global Administrator privileges.
• The Azure AD Federated setup. Azure AD needs to integrate with AD FS on-premises and synchronize identities to Azure. This will be covered in Chapter 17, Azure Active Directory for Hybrid Setup.
• Windows Server 2016 AD FS in local infrastructure.
• Enterprise Admin privileges for AD FS servers to configure MFA.

• Azure MFA needs to be enabled. The users that sync from on-premises AD need to have MFA enabled. I wrote an article about this before, and you can access it via http://www.rebeladmin.com/2016/01/step-by-step-guide-to-configure-mfa-multi-factor-authentication-for-azure-users/.
• The Windows Azure AD module ...