Forum Discussion
How to logon with Azure AD credentials on a Windows 10 device with MFA enabled
I was looking for the same and found this:
"No, you cannot secure console loggings with MFA. For windows 10, you can perform MFA when doing an AAD Join. Once that is done, the device is considered a trusted device and MFA shouldn’t be required anymore. We are relying on windows password and windows hello for business for strong authentication on the device."
from: https://social.msdn.microsoft.com/Forums/azure/en-US/ac4b91ff-b0ec-4b50-a07c-b31696c71cf4/azure-mfa-amp-domain-login-security?forum=windowsazureactiveauthentication
The latest Windows 10 Insider build (17713 ) brings us Web-sign in, is that what you are looking for?
Until now, Windows logon only supported the use of identities federated to ADFS or other providers that support the WS-Fed protocol. We are introducing “Web Sign-in,” a new way of signing into your Windows PC. Web Sign-in enables Windows logon support for non-ADFS federated providers (e.g. SAML).
https://blogs.windows.com/windowsexperience/2018/07/11/announcing-windows-10-insider-preview-build-17713/#e5zyu08iAdTeBS4s.97