Entra MFA for external connections of ThinOS Wyse units to MS RD Gateways

Hi there,

We use WMS Cloud to manage our end users WFH Wyse 3040 and Optiplex 3000 units. We have a couple of Microsoft RD Gateway servers, a couple of RDSH broker servers and a dozen of RDS session host servers all running Windows Server 2022. We use DUO MFA for any external Wyse unit connecting to our TS Gateway servers for MFA.

We are planning to replace DUO MFA with Entra MFA. We have already built a couple of RADIUS/NPS servers and plan to remove DUO security gateway tool only on one RD Gateway server as a first test, and bind the RD Gateway to the RADIUS/NPS server for MFA via Entra and MS Authenticator app (Via push).

We want to know if there’s a configuration that needs to be done at WMS level for Entra MFA or given the TS Gateway will now point to the RADIUS/NPS server for MFA, this will happen on the backend?

I’m trying to picture how the MFA push notification will be sent to the end user’s mobile application. Every user already has Authenticator app installed on their mobile phone and using it for MS Teams with the number matching MFA handshake.

Any advice would be appreciated.

Thank you.

Lsavripen