@franco2018the MFA on premise doesn't need the NPS Service, you only have to active RADUIS Authentication, in client add the public IP of your Service in cisco meraki (there is a big list but I you can capture the packets in your firewall your Will be notice that the request ever arrive from the same IP)   In the second tab of radius authentication select Windows domain (the first option) with that your RADIUS Will work without NPS. ... View more

Hi,   Recently I did it with AZURE MFA on premise, it is very simple   At first you have to follow the steps here: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-deploy   After that you enable Radius server with windows authentication you have to publish your server with a public ip (you can do it with a virtual IP redirect in your firewall)   in your meraki SSID in the splash page option configure Radius server with the public IP that you configure and the port.   After that you have to request to Cisco that the splash time out be 15 seconds, you can open a case because that is in the background.   For the login, almost in my case I have to use the complete user and domain for login: usuario@empresa.com, and in the MFA i'm using the app.   Hope it works for you. ... View more