Configure Additional Authentication Methods for AD FS
In order to enable multi-factor authentication (MFA), you must select at least one additional authentication method. By default, in Active Directory Federation Services (AD FS) in Windows Server® 2012 R2, you can select Certificate Authentication (in other words, smart card-based authentication) as an additional authentication method.
Note
If you select Certificate Authentication, ensure that the smart card certificates have been provisioned securely and have pin requirements.
.jpeg)
|
Did you know that Microsoft Azure provides similar functionality in the cloud? Learn more about Microsoft Azure identity solutions. Create a hybrid identity solution in Microsoft Azure: |
You can also configure and enable Microsoft and third-party authentication methods in AD FS in Windows Server® 2012 R2. Once installed and registered with AD FS, you can enforce MFA as part of the global or per-relying-party authentication policy.
Below is an alphabetical list of Microsoft and third-party providers with MFA offerings currently available for AD FS in Windows Server 2012 R2.
Provider |
Offering |
Link to learn more |
Gemalto |
Gemalto Identity & Security Services |
|
inWebo Technologies |
inWebo Enterprise Authentication service |
|
Login People |
Login People MFA API connector for AD FS 2012 R2 (public beta) |
|
Microsoft Corp. |
Microsoft Azure MFA |
Walkthrough Guide: Manage Risk with Additional Multi-Factor Authentication for Sensitive Applications (see step 3) |
RSA, The Security Division of EMC |
RSA SecurID Authentication Agent for Microsoft Active Directory Federation Services |
RSA SecurID Authentication Agent for Microsoft Active Directory Federation Services |
SafeNet, Inc. |
SafeNet Authentication Service (SAS) Agent for AD FS |
SafeNet Authentication Service: AD FS Agent Configuration Guide |
Swisscom |
Mobile ID Authentication Service and Signature Services |
|
Symantec |
Symantec Validation and ID Protection Service (VIP) |
We now provide instructions for building your own custom authentication method for AD FS in Windows Server 2012 R2. For more information, see Build a Custom Authentication Method for AD FS in Windows Server 2012 R2.
Manage Risk with Additional Multi-Factor Authentication for Sensitive Applications