If the firewall integrates
with a
Multi-Factor
Authentication (MFA) service through RADIUS, you must add
a RADIUS server profile. In this case, the MFA service provides
all the authentication factors (challenges). If the firewall integrates
with an MFA service through a vendor API, you can still use a RADIUS server
profile for the first factor but MFA server profiles are required
for additional factors.