Forum Discussion
Multi-Factor Authentication
Hi Hawkins_IT, we use the following approach:
1. Add the external IP address of the location it send email from to Named Locations.
2. Create a new policy, assign the account that sends email, set the policy to Block, add a location condition, apply to all locations, then in the exclude tab, select the location you just added for the site.
3. Now you can safely exclude the account from the MFA policy, knowing that it can only sign in from that IP address.Generally it is a good idea to add any office locations external IP to MFA Trusted IPs and as Named Locations in Conditional Access (excluded from your MFA policy).
Hi Hawkins_IT, we use the following approach:
1. Add the external IP address of the location it send email from to Named Locations.
2. Create a new policy, assign the account that sends email, set the policy to Block, add a location condition, apply to all locations, then in the exclude tab, select the location you just added for the site.
3. Now you can safely exclude the account from the MFA policy, knowing that it can only sign in from that IP address.
Generally it is a good idea to add any office locations external IP to MFA Trusted IPs and as Named Locations in Conditional Access (excluded from your MFA policy).