I am looking for options to deploy Azure DevOps Server 2019 (legacy TFS) on-premise, but with the ability to use MFA/2FA authentication, as we would have to expose this to other networks as well. Other than the ability to use MFA with Azure DevOps Service (the one hosted in the cloud) I am not able to find any relevant information that can point me to a solution for on-premise design.
As the DevOps server would be domain-joined, there is a possibility to enable MFA on the AD level, but I would like to avoid messing with AD at this time. Other than this, I am exploring a scenario to put a proxy/reverse proxy in front of the DevOps server.
Any suggestions or pointers to articles I can explore are much appreciated.
Thank you for your time and, hopefully, answers! :)