Advanced scenarios with Microsoft Entra Multifactor Authentication Server and third-party VPN solutions
Microsoft Entra Multifactor Authentication Server (formerly Microsoft Entra Multifactor Authentication Server) can be used to seamlessly connect with various third-party VPN solutions. This article focuses on Cisco® ASA VPN appliance, Citrix NetScaler SSL VPN appliance, and the Juniper Networks Secure Access/Pulse Secure Connect Secure SSL VPN appliance. We created configuration guides to address these three common appliances. Microsoft Entra Multifactor Authentication Server can also integrate with most other systems that use RADIUS, LDAP, IIS, or claims-based authentication to AD FS. You can find more details in Microsoft Entra Multifactor Authentication Server configurations.
Important
As of July 1, 2019, Microsoft no longer offers MFA Server for new deployments. New customers that want to require multifactor authentication during sign-in events should use cloud-based Microsoft Entra multifactor authentication.
To get started with cloud-based MFA, see Tutorial: Secure user sign-in events with Microsoft Entra multifactor authentication.
If you use cloud-based MFA, see Integrate your VPN infrastructure with Microsoft Entra Multifactor Authentication.
Existing customers that activated MFA Server before July 1, 2019 can download the latest version, future updates, and generate activation credentials as usual.
Cisco ASA VPN appliance and Microsoft Entra Multifactor Authentication Server
Microsoft Entra Multifactor Authentication Server integrates with your Cisco® ASA VPN appliance to provide additional security for Cisco AnyConnect® VPN logins and portal access. You can use either the LDAP or RADIUS protocol. Select one of the following to download the detailed step-by-step configuration guides.
| Configuration Guide | Description |
|---|---|
| Cisco ASA with Anyconnect VPN and Microsoft Entra Multifactor Authentication Configuration for LDAP | Integrate your Cisco ASA VPN appliance with Microsoft Entra Multifactor Authentication using LDAP |
| Cisco ASA with Anyconnect VPN and Microsoft Entra Multifactor Authentication Configuration for RADIUS | Integrate your Cisco ASA VPN appliance with Microsoft Entra Multifactor Authentication using RADIUS |
Citrix NetScaler SSL VPN and Microsoft Entra Multifactor Authentication Server
Microsoft Entra Multifactor Authentication Server integrates with your Citrix NetScaler SSL VPN appliance to provide additional security for Citrix NetScaler SSL VPN logins and portal access. You can use either the LDAP or RADIUS protocol. Select one of the following to download the detailed step-by-step configuration guides.
| Configuration Guide | Description |
|---|---|
| Citrix NetScaler SSL VPN and Microsoft Entra Multifactor Authentication Configuration for LDAP | Integrate your Citrix NetScaler SSL VPN with Microsoft Entra Multifactor Authentication appliance using LDAP |
| Citrix NetScaler SSL VPN and Microsoft Entra Multifactor Authentication Configuration for RADIUS | Integrate your Citrix NetScaler SSL VPN appliance with Microsoft Entra Multifactor Authentication using RADIUS |
Juniper/Pulse Secure SSL VPN appliance and Microsoft Entra Multifactor Authentication Server
Microsoft Entra Multifactor Authentication Server integrates with your Juniper/Pulse Secure SSL VPN appliance to provide additional security for Juniper/Pulse Secure SSL VPN logins and portal access. You can use either the LDAP or RADIUS protocol. Select one of the following to download the detailed step-by-step configuration guides.
| Configuration Guide | Description |
|---|---|
| Juniper/Pulse Secure SSL VPN and Microsoft Entra Multifactor Authentication Configuration for LDAP | Integrate your Juniper/Pulse Secure SSL VPN with Microsoft Entra Multifactor Authentication appliance using LDAP |
| Juniper/Pulse Secure SSL VPN and Microsoft Entra Multifactor Authentication Configuration for RADIUS | Integrate your Juniper/Pulse Secure SSL VPN appliance with Microsoft Entra Multifactor Authentication using RADIUS |