For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Raghbir_Sandhu's avatar
Raghbir_Sandhu
Icon for Altocumulus rankAltocumulus
Apr 20, 2021

APM Radius based MFA with NPS and Azure AD Microsoft Authenticator App

We are using F5 APM for fist factor authentication with AD authentication and second factor authentication with Microsoft NPS / Microsoft authenticator App. When F5 send radius second factor authenti...
Azure
BIG-IP Access Policy Manager (APM)
cloud
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Apr 23, 2021

For Microsoft you are using push notification and the user does not need to type anything in the login page but just to confirm by phone with one click? You can play with the Message Box action to inform the users before the radius auth that they will need to use their microsoft mfa.

 

 

https://techdocs.f5.com/en-us/bigip-16-0-0/big-ip-access-policy-manager-visual-policy-editor/access-policy-item-reference/about-general-purpose-items/about-the-message-box-action.html

 

 

 

You may also see the example below for the duo auth and modify it for your microsoft auth.

 

https://duo.com/docs/f5bigip

Raghbir_Sandhu's avatar
Raghbir_Sandhu
Icon for Altocumulus rankAltocumulus
May 10, 2021

Nikoolayy1,

We are not using duo. It is has java plugin JS code to include into the APM code. We are using Microsoft MFA which does have any plugin code for APM. The message box will not work, because it require users response (bad user experience).