How to Configure Microsoft Azure Multi-Factor Authentication Server (MFAS) as a Second Authentication Factor

Why MS Azure? Best AD integration, which is very convenient when the same VPN account is used for multiple resources.