View Source

To secure Windows logon with Azure AD user accounts, you first need to set up MFA for Office 365 with WS-Federation.

In addition, the Office 365 application set up in your DualShield server must have 2 logon procedures, one for Web SSO and the other for Enhanced Client (ECP)

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_19-13-17.png

The logon procedure for Enhanced Client must have one logon step with "Static Password" as its authentication method

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_19-18-9.png

User Experience

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_18-45-51.png

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_18-51-25.png

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_18-51-57.png

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_18-52-36.png

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_18-53-44.png

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_18-54-34.png

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_19-7-11.png

DualShield MFA Platform > MFA for Azure AD domain join > image2022-6-25_18-56-7.png

Troubleshooting Reference:

Troubleshoot hybrid Azure AD-joined devices