Not sure this is the best channel for this, but does anyone have any experience running this in production? Download NPS Extension for Azure MFA from Official Microsoft Download Center I set it up in lab, and seems to work great, but looking for experiences

As far as i remember, the NPS extension doesn't support changing passwords as part of the sign-in workflow. Therefore, if the pasword of the user has expired, the user cannot change it...

I think it was with NPS, that not all characters are allowed in the passwords. IF user has some special character in the pw like "ä" then the authentication fails. From my notes: Extended ASCII characters not allowed Characters allowed: A – Z a - z 0 – 9 @ # $ % ^ & * - _ ! + = [ ] { } | \ : ' , . ? / ` ~ " ( ) ;

also you cannot use number matching etc.

It's serviceable, but there's definitely better options out there(for a much higher price). Debugging it is tough, and as Robert and TS says, it's.. well, perhaps not ideal. 😄

From my experience, it's also "normal" that some RADIUS requests fail or doesn't respond. NetScaler always sends the request, but sometimes there's a timeout, so NPS isn't correctly forwarding it to MS / Azure. So the User has to try again... Feels like a non-enterprise ready solution tbh.