title: Azure Active directory MFA for REST API
body: <p>I've a custom application registered with Azure AD.
  Recently I've enabled MFA using Conditional Access Policies.
  MFA works based on the policies but it won't work when application accessed via the <strong>REST API</strong>.</p>
  <p>How to enforce MFA when users are making <strong>/rest</strong> API calls to the application which is backed by MFA?</p>
  <p>Can we utilize something like Expose API?</p>