Update how-to-manage-azure-ad-users.md

Author: nachoalonsoportillo

articles/postgresql/flexible-server/how-to-manage-azure-ad-users.md

@@ -137,6 +137,9 @@ pg_catalog.pgaadauth_create_principal(roleName text, objectId text, objectType t
 ##### `isMfa`
 `boolean` when `true` it enforces Multi Factor Authentication for this PostgreSQL user.
 
+> [!IMPORTANT]
+> The `isMfa` flag tests the `mfa` claim in the Microsoft Entra ID token, but it doesn't impact the token acquisition flow. For example, if the tenant of the principal is not configured for Multi Factor Authentication, it will prevent the use of the feature. And if the tenant requires Multi Factor Authentication for all tokens, it will make this flag useless.
+
 #### Return type
 
 `text` single value that consists of a string "Created role for ***roleName***", where ***roleName*** is the argument passed for the **roleName** parameter.