Azure AD MFA NPS Extension

%3CLINGO-SUB%20id%3D%22lingo-sub-1085722%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20MFA%20NPS%20Extension%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085722%22%20slang%3D%22en-US%22%3E1.%20In%20order%20to%20be%20eligible%20to%20use%20Azure%20AD%20MFA%20NPS%20Extension%20you%20need%20to%20licensed%20for%20Azure%20MFA%20via%20Azure%20MFA%20License%3CBR%20%2F%3E%3CBR%20%2F%3E%22The%20NPS%20Extension%20for%20Azure%20MFA%20is%20available%20to%20customers%20with%20licenses%20for%20Azure%20Multi-Factor%20Authentication%20(included%20with%20Azure%20AD%20Premium%2C%20EMS%2C%20or%20an%20MFA%20stand-alone%20license).%20Consumption-based%20licenses%20for%20Azure%20MFA%20such%20as%20per%20user%20or%20per%20authentication%20licenses%20are%20not%20compatible%20with%20the%20NPS%20extension.%22%3CBR%20%2F%3E%3CBR%20%2F%3EThere%20is%20more%20information%20to%20be%20found%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fhowto-mfa-nps-extension%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fhowto-mfa-nps-extension%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%2C%3CBR%20%2F%3E%3CBR%20%2F%3EViktor%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1087416%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20MFA%20NPS%20Extension%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1087416%22%20slang%3D%22en-US%22%3E%3CP%3Eas%20my%20understand%20then%20license%20MFA%20if%20customer%20buy%20%3CSPAN%3EAzure%20AD%20Premium%20or%26nbsp%3B%3C%2FSPAN%3EEMS%20or%26nbsp%3B%3CSPAN%3Ean%20MFA%20stand-alone%20license%20.%20I%20focus%26nbsp%3Ban%20MFA%20stand-alone%20license%20this%20it%20is%20license%20E1%20or%20E3%20%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1087462%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20AD%20MFA%20NPS%20Extension%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1087462%22%20slang%3D%22en-US%22%3EThere%20is%20no%20stand-alone%20MFA%20license.%20It%20is%20included%20in%20Azure%20AD%20Premium.%20AAD%20Premium%20is%20included%20in%20EM%2BS%20E3%20(P1)%20and%20EM%2BS%20E5%20(P2)%20or%20as%20stand%20alone%20licenses%20for%20both%20P1%20and%20P2.%3CBR%20%2F%3E%3CBR%20%2F%3EOffice%20365%20E1%2FE3%20does%20not%20include%20this.%20Microsoft%20365%20E3%20does%20include%20P1%20and%20E5%2C%20P2.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fconcept-mfa-licensing%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fconcept-mfa-licensing%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%2C%3CBR%20%2F%3E%3CBR%20%2F%3EViktor%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1085677%22%20slang%3D%22en-US%22%3EAzure%20AD%20MFA%20NPS%20Extension%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085677%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20I%20have%20two%20question%20about%26nbsp%3BAzure%20AD%20MFA%20NPS%20Extension%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%201.%20License%20E1%20and%20E3%20office%20365%20can%20install%20and%20use%20Azure%20AD%20MFA%20NPS%20Extension%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%202.%20Can%20install%26nbsp%3BAzure%20AD%20MFA%20NPS%20Extension%20as%20radius%20server%20to%20Horizon%20view%20(VDI)%20can%20integrate%20authen%20%3F%20and%20F5%20VPN%20%3F%20Current%20we%20ready%20configure%20and%20work%20with%20azure%20MFA%20Server%20but%20now%20I%20want%20change%20to%26nbsp%3BAzure%20AD%20MFA%20NPS%20Extension%20because%20one%20authen%20user%20and%20app%20with%20Office365%3C%2FP%3E%3CP%3EBest%20Regards%2C%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1085677%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Regular Contributor

Hello

    I have two question about Azure AD MFA NPS Extension

    1. License E1 and E3 office 365 can install and use Azure AD MFA NPS Extension ?

    2. Can install Azure AD MFA NPS Extension as radius server to Horizon view (VDI) can integrate authen ? and F5 VPN ? Current we ready configure and work with azure MFA Server but now I want change to Azure AD MFA NPS Extension because one authen user and app with Office365

Best Regards,

Thanks

3 Replies
Highlighted
1. In order to be eligible to use Azure AD MFA NPS Extension you need to licensed for Azure MFA via Azure MFA License

"The NPS Extension for Azure MFA is available to customers with licenses for Azure Multi-Factor Authentication (included with Azure AD Premium, EMS, or an MFA stand-alone license). Consumption-based licenses for Azure MFA such as per user or per authentication licenses are not compatible with the NPS extension."

There is more information to be found here: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension

Regards,

Viktor
Highlighted

as my understand then license MFA if customer buy Azure AD Premium or EMS or an MFA stand-alone license . I focus an MFA stand-alone license this it is license E1 or E3 ?

Highlighted
There is no stand-alone MFA license. It is included in Azure AD Premium. AAD Premium is included in EM+S E3 (P1) and EM+S E5 (P2) or as stand alone licenses for both P1 and P2.

Office 365 E1/E3 does not include this. Microsoft 365 E3 does include P1 and E5, P2.

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing

Regards,

Viktor