We’ve had to prepare to enrol a large number of physical hardware tokens into Microsoft MFA. Unfortunately Microsoft do not currently provide a way to do with their own PowerShell suite. The process of adding new tokens can be quite time consuming.

We heavily utilise Active Directory Federation Services (ADFS) as our preferred SSO provider. We have been looking to switch from our existing MFA provider to Azure MFA. Upon configuring our test environment with multiple MFA providers I found that this requires users to select which MFA provider to use at login.

Recently we have had some issues with Windows Update network utilization, to tackle this we have enabled Microsoft Connected Cache on some of our System Center Configuration Manager (SCCM) distribution points. This is a new feature available with System Center Current Branch 1906+ technology that provides a dedicated local server.