Forum Discussion

Pedro Lingual's avatar
Pedro Lingual
Copper Contributor
May 19, 2018

Azure enterprise application with Azure MFA and not our ADFS server

Is this possible   We have our domain federated with ADFS, this is for our O365 users. So when logging on to O365 home realm discovery pushes us to ADFS for authentication.   Now I want to use SA...
Azure Active Directory (AAD)
Identity Management
microsoft 365
Josh Villagomez's avatar
Josh Villagomez
Icon for Microsoft rankMicrosoft
May 21, 2018

Hello Pedro,

 

I don't think this is possible. If your domain is federated with AD FS, then the 1st authentication factor will be redirected to your on-premises AD, regardless if it's an enterprise app or not. MFA is triggered after a successful authentication token is granted (whether on premises or AAD). CA does have the option to not offer MFA in some conditions, but I'm not sure you want to do that. Are you enterprise applications users coming in from the Intranet? 

Resources