This message was deleted.
# citrix-netscalers
Slackbot
03/06/2021, 5:59 PMThis message was deleted.
e
Eric
03/06/2021, 6:00 PMIMHO Google 2FA is a PITA to setup. I know Okta has free Dev licenses.
s
Salim Hurjuk
03/06/2021, 6:03 PMMicrosoft
b
Benjamin Crill
03/06/2021, 6:13 PMDuo
k
Kasper Johansen
03/06/2021, 6:29 PMI now have Azure MFA with AAD auth, but before that I used Duo. Duo is dead easy to configure.
t
Thomas
03/06/2021, 6:38 PMNative OTP on Citrix ADC.
d
Deyda
03/06/2021, 7:45 PMAzure mfa 😇🤘🏽
👍 2
c
CTXMike
03/06/2021, 8:12 PMi used Duo before but swapped to builtin OTP once we added the push functionality
c
c4rm0
03/06/2021, 10:57 PMAtm on my lab Netscaler i got Azure MFA using both SAML method and radius method with the Azure MFA NPS extension. I also use OKTA using dev tenancy again with SAML method and okta radius agents i also got Netscaler native OTP with push setup i switch between them and play with different Nfactor configs
💯 1
e
Eric
03/07/2021, 11:17 AMAzure MFA still requires P1 right? I have MPN O365E3
k
Kasper Johansen
03/07/2021, 1:54 PMNo, I think MFA is available with Azure AD Free, however Conditional Access requires P1 or P2
👍 1
e
Eric
03/07/2021, 2:45 PMI remember I tried that when MS announced the free version due to WFH. I might be doing it wrong using NPS?
k
Kasper Johansen
03/07/2021, 2:56 PMI have not tested MFA with a user in Azure AD Free, so I am not sure it works with Azure NPS Extension. I am only referencing the Microsoft docs:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing
c
c4rm0
03/07/2021, 8:57 PMi signed up to Azure AD P2 premium free trial when i set mine up in my lab its long expired but can still use Azure MFA now i gone back to Azure AD free using SAML on the Netscaler with the SAML Azure enterprise app. I will test with the NPS extension on my NPS server and let you if know if that still works with Azure AD free
💯 1
c4rm0
03/07/2021, 10:24 PMJust tested it in my lab Azure MFA with AzureNPSextension and it works fine with Azure AD free
c
CTXMike
03/07/2021, 11:48 PMCorrect me if I'm off base, but whenever I talk to customers about fronting Azure MFA with NPS it's usually just to make it talk RADIUS since that's easier to config/didn't require AAA-TM licensing on earlier firmware versions. Is there any other advantage?
k
Kasper Johansen
03/08/2021, 7:32 AMIf you are using Azure AD SAML auth, you'll be able to use both Azure MFA and Conditional Access to secure the access to your Citrix environment.
c
c4rm0
03/08/2021, 10:04 AM@CTXMike you dont have to implement Citrix FAS as well if you use Azure MFA with the NPS extension / Radius i suppose that is a benefit for some people who have not got a PKI ect
👍 2
2 Views