Part II: Where to setup your MFA?<\/b><\/p>\n
In the previous blog \u2018What Are You Trying to Secure with Azure MFA?<\/a>\u2019 we discussed the applications or websites that you are trying to secure with MFA. Here, let us discuss where are your users located? You can decide the right MFA solution<\/a> by knowing where your users are.<\/p>\n Once you have figured out what exactly you are trying to secure for implementing MFA, you will need to know where your users are located? There\u2019s a simple logic behind this.<\/p>\n If your users are in the Azure Active Directory, MFA in the cloud is option for you. If your users are in the on-premises Active Directory, then you must go for MFA Server.<\/p>\n However, the users can be in both Azure AD and the on-premises AD with the use of different applications (See the table below). There are specific cases and varying degrees of the user location, but the Active Directory remains central to the selection of your MFA choice.<\/p>\n If the users are in Azure Active Directory and on-premises Active Directory using the federation with ADFS, you must opt for MFA in the cloud. The synchronization tools mentioned above are used in making copies of a local directory in a hybrid cloud deployment of Microsoft Exchange, for example.<\/p>\n If your password is NOT synchronized along with the data, you must choose MFA in the cloud. You might not want your passwords on cloud right, which ultimately defeats the purpose of secure MFA?<\/p>\n But if your password is synchronized along with the data, you might want to choose for MFA Server option, which doesn\u2019t take your data to cloud.<\/p>\n Here, we have discussed about the location of users. Now let us discuss the features that you require in the concluding part (Part 3): The features of Azure MFA \u2013 all you need to know<\/a>.<\/p>\n\n
\n\n
\n \n Azure Active Directory<\/td>\n \n Azure AD and on-premises AD using federation with AD FS<\/td>\n <\/td>\n<\/tr>\n \n Azure AD and on-premises AD using DirSync. Azure AD sync. Azure Connect- no password sync<\/td>\n <\/td>\n<\/tr>\n \n Azure AD and on-premises AD using DirSync. Azure Connect- with password sync<\/td>\n <\/td>\n \n On-premises Active Directory<\/td>\n
\nThe users can be in Azure AD and on-premise AD using synchronization tools like DirSync, Azure AD Connect, Azure AD Sync.<\/p>\n