2FA for ADFS

Microsoft ADFS (Active Directory Federation Service) provides SSO (Single Sign On) for users to applications, services, and resources inside the organization, such as Web apps and disparate apps and resources, as well as SSO to Web services outside of their own organization, such as seamless access to Office 365, Google G-Suite, Slack, Salesforce.com, and more.

Using a federated trust, ADFS manages user authentication via a proxy service hosted between Active Directory and the integrated applications and services. Users can then log into the federated application via SSO without the need to authenticate their identity directly on the application.