Using Azure MFA for on Premises Active Directory (lolware.net)

There are other solutions out there like saas pass that not only support AD on premise but even support legacy Microsoft Exchange, ActiveSync and MAPI protocols.

Disclaimer: worked on the UI team