Meraki wireless Azure AD with MFA

[Richard-Tapp]

We currently use Radius / NPS for our AD authenticated wifi, using Azure AD, with no issue.

We are trying to test this with the Entra ID add on for NPS to do the same but using the MFA from AD.

This works to a point, when I try to connect to the SSID, I get a text code from MS, but no where to enter this on my PC.

Does anyone have any idea what we could be missing ?

[GIdenJoe]

You can't enter this on your pc.
If you're doing MFA you need to have MFA setup on your mobile phone and accept the connection there.

But why on earth would you want to do MFA for Wi-Fi.
This means everytime you do a slow roam you will be prompted for MFA before being able to connect to an AP.  This will be the best way to get all your users to draw pitchforks on you.

Don't ever do MFA on Wi-Fi.

[double_virgule]

Like @GIdenJoe says - I don't believe Windows natively supports MFA on its wifi client, or even for Windows login to PC. If you want to implement MFA on wifi, I think you'll have to also set up some sort of third-party wifi manager on the PC(s).