Forum Discussion
MFA via app on Sharepoint Online
Thank you Adam Ochs and VasilMichev for your answers.
Actually we do have ADFS in place already.
Good to know that the full MFA server is about to be deprecated. Maybe it's not a good idea to put a lot of work into it if we need to move the service later.
As far as I understand Azure MFA is also supporting the mobile app as a second factor, right?
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-whichversion
But I haven't found anywhere to configure that. So at the moment users are using the mobile app to logon via Netscaler to the Citrix Environment and then using OTP to logon to Sharepoint online (only one test user so far). But if we just can use the mobile app instead of OTP - that would be fine.
No no, that's just my "expectation", Microsoft has not said anything about deprecation yet, and even if they do, you will probably have few years of support left.
Keep in mind that the available primary/secondary auth factor options will differ depending on the use. Afaik those are limited for the RADIUS scenario, similarly if you want to configure Azure MFA as primary auth when using AD FS you are only given a single option.