Azure MFA for NPS

Azure Multifactor Authentication for Network Policy Server

Notes:

• I had problems with NPS more than anything. For some reason I got two of them into a state where they wouldn't stop, they'd just say "Stopping..." in the Services window and never come back from that. Finally a competent Windows admin stepped in and got it working again.
• We had to enroll one user in the Azure AD service to install the extension.
• On our Fortigate, I had to change the timeouts so that users would have time to press the application to grant permission to themselves.

config sys global
set remoteauthtimeout 30
end
conf user radius
edit "MyRadiusServer"
set timeout 30
next
end