Enabling and configuring Multi-Factor Authentication

After implementing the basic publishing for our on premise applications we start to integrate the Multi-Factor Authentication to protect applications with a higher security profile, which we will extend in the next chapters.

Device Registration Service (DRS)

The first mechanism we enable is the device registration service on our ADFS infrastructure:

1. Log on to ADS01 with the following credentials:

   • Username: Domain\AdminAccount

   • Password: YourPassword

2. Open an evaluated PowerShell.

   • Username: Domain\AdminAccount

   • Password: YourPassword

3. Open an evaluated PowerShell.

4. Type Update-WebApplicationProxyDeviceRegistration.

5. Provide the same credentials that you used to install the components.

   Note

   Use the following guidance to join a device in your local Active Directory: http://bit.ly/1IjZJQn. Try to configure the necessary claim rules discussed in the previous chapters to get familiar with the integration of the device in the authentication and authorization...