It took removing all the configuration from the NPS server, restarting it, and configuring the Connection Request and Network Policies from scratch so that it would authenticate a user based on domain username and password, then we added the MFA part.
... View more