The application name appears in reports and may be displayed within SMS or mobile app authentication messages. On the Clients tab, change the Authentication and Accounting ports if the Azure MFA RADIUS service needs to listen for RADIUS requests on non-standard ports.Įnter the IP address of the appliance/server that will authenticate to the Azure Multi-Factor Authentication Server, an application name (optional), and a shared secret. In the Azure Multi-Factor Authentication Server, click the RADIUS Authentication icon in the left menu.Ĭheck the Enable RADIUS authentication checkbox. Use the following procedure to configure the Azure Multi-Factor Authentication Server: If you have an Active Directory environment, the server should be joined to the domain inside the network. To configure RADIUS authentication, install the Azure Multi-Factor Authentication Server on a Windows server. In this configuration, one-way SMS and OATH tokens don't work since the MFA Server can't initiate a successful RADIUS Challenge response using alternative protocols. Other protocols, like EAP (extensible authentication protocol), can be used when the MFA server acts as a RADIUS proxy to another RADIUS server that supports that protocol. The MFA Server only supports PAP (password authentication protocol) and MSCHAPv2 (Microsoft's Challenge-Handshake Authentication Protocol) RADIUS protocols when acting as a RADIUS server.

Setup ms authenticator