Update MFA registration links and instructions

[ChristianWeisse]

updating links for Azure MFA proofup page
replacing legacy endpoint https://account.activedirectory.windowsazure.com/Proofup.aspx with recommended endpoint
aka.ms/mfasetup

update to role requirements for Azure MFA Client configuration. Application Admin is not enough (ICM 666354843)

[prmerger-automator]

@ChristianWeisse : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

[learn-build-service-prod]

Learn Build status updates of commit f6706a1:

💡 Validation status: suggestions

File	Status	Preview URL	Details
WindowsServerDocs/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa.md	💡Suggestion		Details

WindowsServerDocs/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa.md

• Line 78, Column 3: [Suggestion: preserve-view-not-set - See documentation] You've pinned this link to a specific version of content with the view parameter. It's recommended not to pin a version unless that version is A) not the default view and B) the context is about that version specifically. To proceed with pinning a version add the &preserve-view=true to the URL. Otherwise, remove the view parameter. URL: /powershell/microsoftgraph/installation?view=graph-powershell-1.0

For more details, please refer to the build report.

Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.

[v-dirichards]

@robinharwood, @Xelu86
Can you review the proposed changes?

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team
#assign: @robinharwood, @Xelu86

[Copilot]

Pull Request Overview

This PR updates the AD FS and Azure MFA configuration documentation to reflect current URLs, prerequisites, and best practices. The changes modernize outdated references and improve clarity.

• Updated legacy Azure MFA setup URLs to the current https://aka.ms/mfasetup shortlink
• Modernized prerequisites to include Windows Server 2016 or later and Microsoft Graph PowerShell
• Improved formatting and clarity in the Azure Government cloud configuration section

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Missing 'Microsoft' before 'Entra ID'. The product name should be 'Microsoft Entra ID' for consistency with other references in the document.

Suggested change

	- Active Directory Users must be synchronized with the Entra ID Tenant (multiple tenants are not supported)
	- Active Directory Users must be synchronized with the Microsoft Entra ID Tenant (multiple tenants are not supported)

[Copilot]

The URL parameter format is incorrect. The original URL used 'whr=' parameter, but this change uses 'domain_hint=' without a '&' separator after the base URL. It should be 'https://aka.ms/mfasetup?whr=' to maintain the same parameter pattern, or if domain_hint is the correct parameter for the new URL, there should be documentation confirming this change in behavior.

Suggested change

	var mfaRegisterUrl = "https://aka.ms/mfasetup?domain_hint=" + domain_hint;
	var mfaRegisterUrl = "https://aka.ms/mfasetup?whr=" + domain_hint;