Configuring conditional access control

Before configuring conditional access control scenarios, we need to implement the Azure MFA server on the Identity Bridge server IDB01:

1. Open https://manage.windowsazure.com in your preferred browser and log on with your global administrator credentials.
2. Go to CONFIGURE | multifactor authentication | Manage service settings.
3. To manage advanced settings and view reports, go to the portal | Manage advanced settings and view reports.
4. DOWNLOADS: Download the Multi-Factor Authentication Server.
5. Click Generate Activation Credentials.

   Note

   The Activation Credentials (valid for 10 minutes).

6. Click Download.

Installing and configuring the Azure MFA server

After downloading the installation binaries, we need to install the Azure MFA server.

Note

Practical note:

We recommend changing the virtual machine size of IDB01 to an A2 (two cores, 3.5 GB memory).

1. Log on to the ADFS Server IDB01 with the following credentials:
   • Username: Domain\AdminAccount
   • Password: YourPassword
2. Double-click...