MFA License question

[Shahin]

Hi,

We have Office 365 E3 licenses and our on-perm AD is synced to the Azure AD.

Now we would like to use MFA for our online services that using the Azure AD, and also use MFA for our on-prem Rdgateway servers. We did run a test with Azure AD Perineum P2 trail licenses and setup a test environment and everything works. Now we want to buy Azure AD licenses. 

Do we have to buy Azure Perineum P2 licenses or we can also buy Microsoft Azure multi-factor authentication premium standalone licenses?

Thanks

[JanoschUlmer]

Unless you want to use advanced identity protection features in connection with MFA, you can also go for Azure AD Premium Plan1 - see also https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing. There is no standalone MFA license however - and I'd recommend to also look at the other features of AzureAD Premium licenses that might be useful in other scenario, e.g. self-service password reset - see this link:https://azure.microsoft.com/en-us/pricing/details/active-directory/