Forum Discussion

jessir's avatar
jessir
Copper Contributor
Mar 30, 2020

License for MFA

Hi All, 

 

I'm very new here, so I hope I'm on right place.

In our company we are using F5 loadbalancer and for MFA authentication we want to use Microsoft azure (AAD), application name for this is called: "F5 BIG-IP APM Azure AD integration". Question is if P1 license is enough for this type of service.

 

If my question is not clear, please ask me and I will try to give you aditional information.

 

Thank  you in advance

3 Replies

  • Michael Tang's avatar
    Michael Tang
    Brass Contributor

    jessir 

     

    I've done a few F5 integrations

    F5 APM -> Azure AD SAML integration

    F5 APM -> NPS Azure MFA extension 

    F5 APM -> ADFS / Azure MFA

     

    https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing#feature-comparison-of-versions

     

    If you have Office 365 E3/E5 or Microsoft 365 E3/E5 that's enough. 

     

    If you have Office 365 Business Premium and plan to add-on P1, I would recommend at least a the new Microsoft 365 Business Premium plan(renamed April 21, 2020) that will include Azure AD Premium P1 add-on soon.  You get Intune device management license as well with M365.

     

    MFA doesn't require a license unless you want to use other authentication methods other than app, such as text message or phone call.

     

    But you will want P1 licenses to utilize Conditional Access policy for MFA vs per user MFA setting.

     

     

  • P1 Should be sufficient, but I'd recommend addressing such questions to the vendor directly.

    • jessir's avatar
      jessir
      Copper Contributor
      Hi Vasil, thanks for reply, which vendor do you mean, because from F5 point of view I know what licenses should be used, but I do not if P1 is sufficient from Microsoft point of view. Thank you

Resources