For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

igorzhuk's avatar
igorzhuk
Icon for Altostratus rankAltostratus
Sep 03, 2018

Integrating Azure MFA and BIGIP

Hi All I have F5 on DC the customer have AzurMFA service I need Integrating that AzurMFA be the second factor with AzurPhone APP for Access to Aplication I read this article ";   but I have a lit...
Azure
BIG-IP Access Policy Manager (APM)
cloud
devops
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 03, 2018

Hi Igor,

 

You want to use MFA provide by microsoft (Phone, SMS, or Mobile App) for Strong auth.

 

So if you want to use this functionnality you have to an "AAA servers" and as you know, this resource is outside your internal network.

 

So you have to allow your Radius client to communicate with "cloud-based Azure Multi-Factor Authentication". From your F5 internel and "cloud-based Azure Multi-Factor Authentication".

 

Microsoft allow you to secure you communication (source IP based) and Ipsec (but i never tested it...), you have multiple choice for secure this channel. When you will setup your service you can select what you want for communication between radius services and your client (F5).

 

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension

 

Let me know how i can help you.

 

regards,