Security

Previously this could be done using the on-prem Azure MFA server (

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-deploy ).
However MS no longer offer this solution and suggest moving to the cloud.
The cloud solution in turn seem to only be supported by an NPS extesion as far as I can see.

Does anyone know if there is a possibility to integrate VIA VPN with AzureMFA auth flow, preferably with CPPM as radius rather than direct AD connection.

While this is not officially supported by Aruba, you can proxy the request to an NPS server running the Azure MFA extension.