Advanced scenarios with Azure MFA Server and third-party VPN solutions

Azure Multi-Factor Authentication Server (Azure MFA Server) can be used to seamlessly connect with various third-party VPN solutions. This article focuses on Cisco® ASA VPN appliance, Citrix NetScaler SSL VPN appliance, and the Juniper Networks Secure Access/Pulse Secure Connect Secure SSL VPN appliance. We created configuration guides to address these three common appliances. Azure MFA Server can also integrate with most other systems that use RADIUS, LDAP, IIS, or claims-based authentication to AD FS. You can find more details in Azure MFA Server configurations.

Important

As of July 1, 2019, Microsoft will no longer offer MFA Server for new deployments. New customers who would like to require multi-factor authentication from their users should use cloud-based Azure Multi-Factor Authentication. Existing customers who have activated MFA Server prior to July 1 will be able to download the latest version, future updates and generate activation credentials as usual.

Cisco ASA VPN appliance and Azure MFA Server

Azure MFA Server integrates with your Cisco® ASA VPN appliance to provide additional security for Cisco AnyConnect® VPN logins and portal access. You can use either the LDAP or RADIUS protocol. Select one of the following to download the detailed step-by-step configuration guides.

Configuration Guide Description
Cisco ASA with Anyconnect VPN and Azure MFA Configuration for LDAP Integrate your Cisco ASA VPN appliance with Azure MFA using LDAP
Cisco ASA with Anyconnect VPN and Azure MFA Configuration for RADIUS Integrate your Cisco ASA VPN appliance with Azure MFA using RADIUS

Citrix NetScaler SSL VPN and Azure MFA Server

Azure MFA Server integrates with your Citrix NetScaler SSL VPN appliance to provide additional security for Citrix NetScaler SSL VPN logins and portal access. You can use either the LDAP or RADIUS protocol. Select one of the following to download the detailed step-by-step configuration guides.

Configuration Guide Description
Citrix NetScaler SSL VPN and Azure MFA Configuration for LDAP Integrate your Citrix NetScaler SSL VPN with Azure MFA appliance using LDAP
Citrix NetScaler SSL VPN and Azure MFA Configuration for RADIUS Integrate your Citrix NetScaler SSL VPN appliance with Azure MFA using RADIUS

Juniper/Pulse Secure SSL VPN appliance and Azure MFA Server

Azure MFA Server integrates with your Juniper/Pulse Secure SSL VPN appliance to provide additional security for Juniper/Pulse Secure SSL VPN logins and portal access. You can use either the LDAP or RADIUS protocol. Select one of the following to download the detailed step-by-step configuration guides.

Configuration Guide Description
Juniper/Pulse Secure SSL VPN and Azure MFA Configuration for LDAP Integrate your Juniper/Pulse Secure SSL VPN with Azure MFA appliance using LDAP
Juniper/Pulse Secure SSL VPN and Azure MFA Configuration for RADIUS Integrate your Juniper/Pulse Secure SSL VPN appliance with Azure MFA using RADIUS

Next steps