Microsoft ADFS

Integrating Keyless with Active Directory Federation Services
This integration provides a Keyless multi-factor authentication prompt to web-based logins through an AD FS Identity Provider and/or Web Application Proxy. After completing primary authentication to the AD FS server , your users will be required to complete a Keyless challenge before getting redirected back to the relying party.
A high-level architecture diagram of the integration can be found below.