In this scenario I will only use Azure MFA and the setup described here will also work if you are using ADFS federation but still want to use Azure MFA. SETUP AZURE MFA FOR DEVICE REGISTRATION AND AAD JOINįirst thing you need to do is to enable MFA either in Azure MFA or on your ADFS. I will also cover different options for enrollment of Windows 10 Mobile.

But this does not apply to all scenarios, so in this blog post I am going to go into each platform and explain what happens during enrollment and how the MFA is triggered. This registration in Azure AD can easily be connected to a MFA requirement by just configuring your Azure AD to require MFA for device registration. I have been working with setup of MFA required for enrollment in Intune a bit lately and have discovered a couple of things that is not really explained well in the Intune console/documentation.Įnrollment of devices in Intune will in most cases also trigger a device registration in Azure AD. Cloud Infrastructure | Azure MFA for Enrollment in Intune and Azure AD Device registration explained

Intune mfa