Im stunned that this is not an option within Clearpass. I mean, they already have all the elements to make this work, eg: SMS engine, full control of the radius process, Access to AD.
Im sad that I have to tell the customer that they have to keep a separate redundant NPS cluster running even after they have moved all auth to Clearpass, just to have MFA. Its annoying, when it seems you are 95% of the way to make it happen.
How do I submit a feature request?