I have this configured to VPN into on-prem network with Fortigate talking to RADIUS, which in turn talks to Azure. It works perfectly for push notifications to the Authenticator app, you just approve ...