You can configure Entra joined PCs to use Entra ID as the user authentication server, and configure Entra ID to delegate MFA to the DualShield MFA server.
Below is the architecture and data flow in this type of system:
1 - Using On-Prem AD as the Identity Source

2- Using Azure AD as the Identity Source

To set up this type of system, follow the steps below: