Enabling MFA for Endpoints

Note: MFA for endpoints is available only with the Endpoint MFA enabled.

ADSelfService Plus supports multi-factor authentication (MFA) for domain users with domain machines using all the three major OSs—Windows, macOS, and Linux, and local Windows machine users. Users logging into their desktops or laptops, including through Windows Remote Desktop Protocol (RDP), will be required to enter their username and password as well as go through an additional step of authentication.

For domain users, ADSelfService Plus also supports MFA for VPN logins to ensure that only the right people have remote access to sensitive internal resources.

Click on the links below to learn how to configure MFA via ADSelfService Plus.

• For domain users:
  • Endpoint MFA for Windows, macOS, and Linux
  • MFA for VPNs and all endpoints supporting RADIUS authentication like Citrix Gateway, VMWare Horizon, and Microsoft Remote Desktop Gateway.
  • MFA for OWA and Exchange admin center
• For local Windows users:
  • Endpoint MFA for Windows machines
• For both Workgroup and domain-joined Windows machines
  • Advanced machine MFA for Windows peripheral connections