At Ignite 2022 we announced general availability of Azure Active Directory (Azure AD) Certificate-Based Authentication (CBA) as a part of Microsoft’s commitment to Executive Order 14028, Improving th...
Updated Nov 02, 2022
Version 2.0
Blog Post
I'm doing some initial lab work AAD CBA + mobile right now to try to figure things out.
1. This is kind of confusing, but in the config guide it shows how you set up "Certificate issuer" as single-factor. With only that rule you're told that this is no good as far as MFA goes. Then by adding the "Policy OID" with the MFA protection level things seems to be good and I'm able to login just by using the cert from my Yubikey. (Sorry if this is not what you had in mind with your question.)