Configure AD FS 2016 and Azure MFA - How do I get the guid for Azure Multi-Factor Auth Client?

Question

Hi All,
&nbsp;
I am trying to&nbsp;Configure AD FS 2016 and Azure MFA as shown on the Microsoft site:
&nbsp;
&nbsp;
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa#step-1-generate-a-certificate-for-azure-mfa-on-each-ad-fs-server-using-the-new-adfsazuremfatenantcertificate-cmdlet
&nbsp;
It says "981f26a1-7f43-403b-a875-f8b09b8cd720 is the guid for Azure Multi-Factor Auth Client" but doesn't show how we get this GUID.
&nbsp;
When I try the command I get an error message I think is related to the GUID. How do I get the&nbsp;guid for Azure Multi-Factor Auth Client?&nbsp;

&nbsp;
I hope you can helpColin

vasilmichev · Accepted Answer

The screenshot you posted uses a different GUID, make sure you provide exactly "981f26a1-7f43-403b-a875-f8b09b8cd720" as the value for -AppPrincipalID. As explained in the article, this is the id of the Azure MFA application that exists in your tenant:
&nbsp;
Get-MsolServicePrincipal -AppPrincipalId 981f26a1-7f43-403b-a875-f8b09b8cd720

ExtensionData         : System.Runtime.Serialization.ExtensionDataObject
AccountEnabled        : True
Addresses             : {Microsoft.Online.Administration.RedirectUri}
AppPrincipalId        : 981f26a1-7f43-403b-a875-f8b09b8cd720
DisplayName           : Azure Multi-Factor Auth Client
ObjectId              : 81376720-790b-4752-bce1-a769de2bb39b
ServicePrincipalNames : {981f26a1-7f43-403b-a875-f8b09b8cd720, AzureMulti-FactorAuthClient}
TrustedForDelegation  : False
&nbsp;

Forum Discussion

Configure AD FS 2016 and Azure MFA - How do I get the guid for Azure Multi-Factor Auth Client?

Share

Resources