Does Azure Bastion Standard tier support Azure AD MFA on AAD domain joined Machine

Jorge Rodrigues 181 Reputation points
2023-03-08T14:24:30.4466667+00:00

I cannot find this information in the Azure Bastion MS documentation. When accessing a VM on Azure that is domain joined through an Azure Bastion "Standard", if the user has MFA enabled, will the login be successful? Will it prompt the user for MFA and then authorize the login or is MFA not supported by the Azure Bastion product?

The only information available in the forums is related with third-party MFA like google authenticator and that is not supported according to the MSFT forum members.

https://video2.skills-academy.com/en-us/answers/questions/790542/using-third-party-mfa-for-azure-bastion

Thanks in advance.

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,874 questions
Azure Bastion
Azure Bastion
An Azure service that provides private and fully managed Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines.
262 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,699 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. ChaitanyaNaykodi-MSFT 26,101 Reputation points Microsoft Employee
    2023-03-08T19:27:10.79+00:00

    @Jorge Rodrigues

    Thank you for reaching out.

    Currently Azure Bastion does not support MFA. It will be helpful if you can upvote this feature request.

    If it helps you can go through this solution which describes a multilayered protection for Azure virtual machine access using just-in-time (JIT) VM access feature of Microsoft Defender for Cloud and Bastion.

    Thank you!

    ​​Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.