Forum Discussion
License for MFA
Hi All,
I'm very new here, so I hope I'm on right place.
In our company we are using F5 loadbalancer and for MFA authentication we want to use Microsoft azure (AAD), application name for this is called: "F5 BIG-IP APM Azure AD integration". Question is if P1 license is enough for this type of service.
If my question is not clear, please ask me and I will try to give you aditional information.
Thank you in advance
3 Replies
- Michael TangBrass Contributor
I've done a few F5 integrations
F5 APM -> Azure AD SAML integration
F5 APM -> NPS Azure MFA extension
F5 APM -> ADFS / Azure MFA
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing#feature-comparison-of-versions
If you have Office 365 E3/E5 or Microsoft 365 E3/E5 that's enough.
If you have Office 365 Business Premium and plan to add-on P1, I would recommend at least a the new Microsoft 365 Business Premium plan(renamed April 21, 2020) that will include Azure AD Premium P1 add-on soon. You get Intune device management license as well with M365.
MFA doesn't require a license unless you want to use other authentication methods other than app, such as text message or phone call.
But you will want P1 licenses to utilize Conditional Access policy for MFA vs per user MFA setting.
P1 Should be sufficient, but I'd recommend addressing such questions to the vendor directly.
- jessirCopper ContributorHi Vasil, thanks for reply, which vendor do you mean, because from F5 point of view I know what licenses should be used, but I do not if P1 is sufficient from Microsoft point of view. Thank you