@lmorel I would be willing to bet that they will allow us to point to a radius server for external auth.  If that the case then you can use a Duo Authentication Proxy or Network Policy Server (NPS) extension for Azure MFA.  I have been using Duo with the current Client VPN and it has been working just fine. ... View more