You can configure Entra joined PCs to use Entra ID as the user authentication server, and configure Entra ID to delegate MFA to the DualShield MFA server.
Below is the data flow in this type of system:
To set up this type of system, follow the steps below:
Configure Entra ID EAM with DualShield MFA
An external authentication method (EAM) lets users choose an external provider to meet multifactor authentication (MFA) requirements when they sign in to Microsoft Entra ID.
This guide provides instructions on setting up DualShield as an external authentication method (EAM) provider for Entra ID.