Forum Discussion
William Lampert
Mar 26, 2024Brass Contributor
Creating MFA conditional Policy, not triggering to enroll when signing in.
We're looking to rollout MFA for all our users, specifically just for any access to their Exchange Online and Microsoft Teams. I've followed the the instructions from Microsoft's Knowledge article: h...
tlakshmanan
Mar 27, 2024Copper Contributor
Hello,
Even if end users are not registered for MFA, the Conditional Access Policy (CAP) should prompt them to register for MFA to access the resource.
In your scenario, have you checked the sign-in logs to confirm if the CAP is being applied? Additionally, have you tested the "What if" functionality under Conditional Access Policy to evaluate your newly created policy?
Reference: https://learn.microsoft.com/en-us/entra/identity/conditional-access/what-if-tool
Even if end users are not registered for MFA, the Conditional Access Policy (CAP) should prompt them to register for MFA to access the resource.
In your scenario, have you checked the sign-in logs to confirm if the CAP is being applied? Additionally, have you tested the "What if" functionality under Conditional Access Policy to evaluate your newly created policy?
Reference: https://learn.microsoft.com/en-us/entra/identity/conditional-access/what-if-tool