VPN & Microsoft Authenticator

[tman]

Looking for help or documentation to configure the Client VPN Anyconnect to use Microsoft Authenticator for MFA. 

[Mloraditch]

You have two options NPS authentication following this guide: 
https://documentation.meraki.com/MX/Client_VPN/Configuring_RADIUS_Authentication_with_Client_VPN_IPs...
and this one: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-nps-extension

You would just be doing the meraki side settings on the anyconnect page vs client vpn.

Or you can use SAML:
 https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/AnyConnect_Azure_AD_SA... and then in Entra you would control whether MFA is prompted for.

[MartinLL]

You need to use SAML if you dont have any radius service like ISE that can forward your authentication to an MFA server.

Read here.

https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/AnyConnect_Azure_AD_SA...