Azure MFA服务器和SharePoint 2016 FBA？ [英] Azure MFA Server and SharePoint 2016 FBA ?
问题描述
我们拥有SharePoint 2016 Extranet，并且根据策略，用户通过基于表单的身份验证进行身份验证。我需要为Extranet用户使用Azure多重身份验证服务器（On Prem）。
We have SharePoint 2016 Extranet, and based on policies, users are Authenticated through Form-Based Authentication.And I have a requirement to use Azure Multi-Factor Authentication Server (On Prem) for Extranet users.
深挖后我没有找到任何
UPDATED 有关此主题的信息如何配置和集成MFA和SP2016 FBA，因为我发现的大部分信息都已过时，我希望如果有人可以贡献（也许他有机会尝试并测试它）帮助我，以便找出解决方案。
After deep digging I did not find any UPDATED information about this topic how to Configure and Integrate MFA and SP2016 FBA, as most of info I found is outdated, and I hope if someone can contribute (maybe he has the chance to try and test it) to help me so I can figure out the solution.
我的问题：
1-有没有办法为我的测试环境下载Azure MFA服务器所以我可以测试（因为我没有Azure企业许可证）？
1- Is there a way to download Azure MFA Server for my testing environment so I can test (As I don't have Azure Enterprise License) ?
2-应该将MFA服务器（从Azure门户下载）安装在IIS所在的同一台SharePoint机器上找到应用程序（将启用MFA的IIS应用程序）？
2- Should MFA Server (which is Downloaded from Azure Portal) be installed in the same SharePoint Machine where the IIS App is located (The IIS App which MFA will be enabled for)?
3-如何"将MFA服务器配置为在高级设置中进行后验证。 ""有没有人试过这个？并且
可以确认它是否正常工作？
3- How to "configure the MFA Server to do post-authentication in the advanced settings. " Did Anyone try this ? and can he confirm if it is working?
4-是否有关于如何在MFA和SharePoint 2016 FBA之间配置和集成的屏幕的任何教程（已更新）？
4- Is there any tutorial (Updated) with Screens on How to Configure and Integrate between MFA and SharePoint 2016 FBA?
https://docs.microsoft .com / zh-CN / azure / active-directory / authentication / howto-mfaserver-iis
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-iis
https://social.msdn.microsoft.com/Forums/azure/en-US / 430257c5-bafc-44ba-ab56-274718bf6d95 / mfa-with-sharepoint-and-fba？forum = windowsazureactiveauthentication
https://social.msdn.microsoft.com/Forums/azure/en-US/430257c5-bafc-44ba-ab56-274718bf6d95/mfa-with-sharepoint-and-fba?forum=windowsazureactiveauthentication
https://magenic.com/thinking/multi-factor-authentication -on-sharepoint-using-ad-ds
https://magenic.com/thinking/multi-factor-authentication-on-sharepoint-using-ad-ds
推荐答案
1.您可以在此下载MFA服务器： https：/ /www.microsoft.com/en-us/download/details.aspx?id=55849
1. Here is where you can download MFA Server: https://www.microsoft.com/en-us/download/details.aspx?id=55849
2.是的，它应该安装在那里。 https://docs.microsoft .com / zh-CN / azure / active-directory / authentication / howto-mfaserver-iis
2. Yes, it should be installed there. https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-iis
3.对于后验证，MFA服务器允许应用程序执行自己的主验证，然后评估Web响应以查看主验证是成功还是失败。如果成功，它将执行MFA。您必须配置post-auth设置
以检测Web响应中的唯一文本，该文本指示主要身份验证成功与失败。 （我相信我之前在实验室做过这个但是已经有一段时间了，所以无法确认所有的设置。）
3. For the post-authentication, the MFA Server lets the application do its own primary auth and then evaluates the web response to see if the primary auth succeeded or failed. If it succeeded, it will perform MFA. You have to configure the post-auth settings to detect unique text within the web response that indicates primary auth success versus failure. (I believe that I did this in a lab before but it's been a while so can't confirm all of the settings.)
4。不幸的是，似乎没有更新的教程，但我将您的反馈作为文档请求传递给产品团队。 ：）
4. Unfortunately there does not appear to be an updated tutorial for this, but I am passing your feedback along to the product team as a doc-request. :)
这篇关于Azure MFA服务器和SharePoint 2016 FBA？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
