Enabling and configuring Multi-Factor Authentication

After implementing the basic publishing for our on premise applications we start to integrate the Multi-Factor Authentication to protect applications with a higher security profile, which we will extend in the next chapters.

Device Registration Service (DRS)

The first mechanism we enable is the device registration service on our ADFS infrastructure:

1. Log on to ADS01 with the following credentials:
   • Username: Domain\AdminAccount
   • Password: YourPassword
2. Open an evaluated PowerShell.
   • Username: Domain\AdminAccount
   • Password: YourPassword
3. Open an evaluated PowerShell.
4. Type Update-WebApplicationProxyDeviceRegistration.
5. Provide the same credentials that you used to install the components.

   Note

   Use the following guidance to join a device in your local Active Directory: http://bit.ly/1IjZJQn. Try to configure the necessary claim rules discussed in the previous chapters to get familiar with the integration of the device in the authentication and authorization process...