Infrastructure with Azure MFA

Question

Please help me to understand

I am currently studying the "Azure MFA". After reading the below article I am assuming that if any of the license acquired like office365 then the person can use it for internal infrastructure as well with no extra cost. For example MFA can be use for windows login or MFA can be use for vpn dialer or MFA can be use for accessing remote desktop/terminal services with no additional cost.

https://azure.microsoft.com/en-us/pricing/details/active-directory/

Answer 1

@zahid haseeb Multi-Factor Authentication for Office 365 users offers a subset of Azure MFA features at no cost for access to Office 365 services, including Exchange Online and SharePoint Online. subset of Azure MFA features means, you will not be able to perform actions such as trigger MFA using Conditional Access policies or configure trusted IPs to skip MFA (as highlighted below) as these features are available with Premium versions of Azure AD.

However, with the help of NPS extension, you should be able perform MFA for VPN and RDP sessions in your on premises environment.

Note: If you activate Azure AD Premium license for 1 user, these features will be available to all users in the tenant but in order to stay compliant, you should be having premium license for all users who are using the premium features.

Hope this answers your question. Refer to MFA FAQs here for more details.

-----------------------------------------------------------------------------------------------------------

Please "mark as answer" or "vote as helpful" wherever the information provided helps you to help others in the community.

Answer 2

Yes, correct. Take a look as this and comply with the pre-reqs.

Answer 3

It's not "any" license, you need Azure AD Premium P1 specifically if you want to protect on-premises apps: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing