AD APM integration is documented on clouddocs, should be a simple google search.
But what sort of MFA are you intending to use? - radius or cloud based?
There should also be info online for this also.
ok try this for AD
And this for Radius
I have it setup where i do AD first, then on the success branch i then do a radius lookup passing in the same credientials as the AD lookup. But my AD is linked to the radius 2FA, so they both use the same usernames.