For Entra ID joined PCs, you can use DualShield to authenticate users with MFA. Below is the architecture and data flow of this setup:

B1 - User On-Prem AD as the Identity Source

C1 - Use Azure AD as the Identity Source

To use DualShield MFA to authenticate users on Entra ID joined PCs, you must complete the following steps:

• Set up an OIDC service provider in DualShield for Computer Logon MA
• Configure Computer Logon Modern Authentication
• Deploy Computer Logon Modern Authentication