Microsoft MFA support?

[Cantor, Scott]

> I'm wondering if anyone has deployed Microsoft MFA on an
> IdP where the IdP is still doing its own password
> authentication instead of proxying to EntraID.

My understanding was that wasn't possible. If that's untrue, I don't think I'm speaking too far afield in saying we'd be willing to support it.

> We've also got the use case of Duo in a non-browser context
> for ECP authentications using MFA and could ideally use
> Microsoft MFA in a non-browser context with the IdP, as
> well.

It might be similar in the sense that if they have a constrained non-HTML-based API/interface to it, that might be the limit of what could be supported. For ECP, that's ok, but I suspect that would be non-viable for general use.

> We could obviously write it ourselves, but I'd like to know if
> others have already tackled this and can share any wisdom
> or code.

You can toss it over the wall if you come up with something for us to maintain obviously.

-- Scott