NPS Extension

The Microsoft Entra Multi-Factor Authentication NPS Extension is a Microsoft-provided extension for Windows Network Policy Server (NPS) — the Windows RADIUS server — that adds Entra ID MFA to RADIUS authentications. Used to enforce MFA on VPN, Wi-Fi, and other RADIUS-authenticated services that don't natively support modern authentication. When a user authenticates against NPS, the extension forwards the request to Entra ID for MFA verification before completing authentication. Bridge solution for legacy infrastructure during the transition to modern identity. The strategic direction is Entra Private Access and Global Secure Access for VPN-style scenarios, replacing the NPS extension pattern over time.