How I did It - “Integrating Azure MFA with the BIG-IP”

One of the most interesting parts of my job is answering questions.  Mind you, these questions aren’t the usual meaningless ones like, “Hey Greg, is a Roth IRA right for me?” or “What’s the meaning o...
Published Apr 22, 2016
Version 1.0
BIG-IP
BIG-IP Access Policy Manager (APM)
cloud
security
christineleeatu's avatar
christineleeatu
Icon for Nimbostratus rankNimbostratus
Apr 04, 2018

HI all,

 

Can you enable MS MFA by each application? e.g. if I can add SAP servers/systems for enabling MFA for finance users, and for the same users they won't be asked for 2nd factor authentication when they access to internal training system.

 

Currently our setup is putting every applications behind of VPN and put MFA in the front of VPN, but what we want to do is enable MFA by each application.

 

is it capable with MS MFA? looks like it doesn't have very granular control - e.g. Azure AD doesn't support AD groups.

 

i'm not a technical person and i'm not sure if I explained it well enough.