Explanation You can use Conditional Access to configure Multi-Factor Authentication policies. Conditional Access runs on Azure AD References: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-security https://thesleepyadmins.com/2019/02/10/configure-mfa-for-azure-application-proxy/