Problem with AzureAD MFA on OpenVPN
-
So I have everything set up for OpenVPN to authenticate against NPS via RADIUS and the AzureAD Plugin for NPS. When I test authentication via diagnostics or by attempting the VPN connection, I receive the push notification, approve it and then nothing happens. A few seconds later, I get a second push notification which I accept but then it fails auth.
When I test it using a tool such as ntradping, everything works flawlessly. So there's something in my pfSense setup that isn't quite right.
In Windows Event Viewer on the NPS server, I get event 6272 Network Policy Server granted access to a user followed immediately by event 6274 Network Policy Server discarded the request for a user (in the same second usually).
What am I missing?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.