Håvard Siegel Haukeberg

In this blog post I will look into how you can accomplish Azure Multi-Factor Authentication for Admins even though the Online PowerShell Module don’t support it. The key to do this is to implement and use Azure AD Privileged Identity Management, which is an Azure AD Premium P2 / EMS E5 feature.

The Problem

Administration of Online Services with PowerShell can be done with different PowerShell modules or for some scenarios setting up a remote session to the Online Service.  But not all scenarios support Azure MFA natively.

A quick overview of the main modules that DO support Azure MFA today:

• Azure PowerShell. Supports Azure MFA with Add-AzureAccount.
• Azure Resource Manager PowerShell. Supports Azure MFA with Login-AzureRMAccount.
• Azure Active Directory PowerShell MSOnline Module. Supports Azure MFA with Connect-MSOLService.
• The Public Preview of Azure AD v2 PowerShell (https://azure.microsoft.com/en-us/updates/azure-ad-new-powershell-cmdlets-preview/). Supports Azure MFA with