An NPS extension dynamic link library (DLL) that is installed on the NPS server rejected the connection request
Validar que el registro HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AzureMfa exista la variable OVERRIDE_NUMBER_MATCHING_WITH_OTP = FALSE
SI esta no se encuentra se debe crear tipo string:
regedit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AzureMfa
OVERRIDE_NUMBER_MATCHING_WITH_OTP = FALSE
Solucionadoooo.....