Conditional Access Policy for MFA for Guest is flagging non-guest users

Question

Hello,&nbsp;We recently enabled a conditional access policy for MFA for Guest Users.&nbsp; &nbsp; We have a hybrid environment, but some of our new users only have Azure AD accounts, since they have no reason to be associated with our on premise AD.&nbsp; &nbsp; It appears that this Guest MFA conditional access policy is being applied to non-guest users if they are only found in Azure AD and not on prem.&nbsp; &nbsp;&nbsp;&nbsp;I guess the question is,&nbsp; why is this policy not ignoring "User" types in&nbsp;

eliekarkafy · Answer

can you share a screenshot of your CA policy settings

mikethor · Answer

eliekarkafy&nbsp; &nbsp;Absolutely,&nbsp; &nbsp; There are no exclusions.&nbsp; I even included the activity details for the user when logging in.&nbsp; &nbsp; &nbsp; &nbsp; Appreciate the help.&nbsp;&nbsp;&nbsp;

eliekarkafy · Answer

MikeThor&nbsp;can you please recreate the conditional access policy using the template below from the CA blade. Make sure also that you don't have another CA affecting the member users.&nbsp;also double check also if your member users dont not have per user mfa enabled&nbsp;&nbsp;Regards,&nbsp;Elie

mikethor · Answer

eliekarkafy&nbsp; &nbsp;The re-creating of the policy seems to do the trick.&nbsp; It is now bypassing the policy.&nbsp;Appreciate the help.

eliekarkafy · Answer

MikeThor&nbsp;Please click&nbsp;Mark as Best Response&nbsp;&amp;&nbsp;Like&nbsp;if my post helped you to solve your issue. This will help others to find the correct solution easily.

Forum Discussion

Conditional Access Policy for MFA for Guest is flagging non-guest users

Share

Resources