Forum Discussion

Tomas_Dudek's avatar
Tomas_Dudek
Copper Contributor
Jan 25, 2024

The MFA message will be automatically turned on for all users

Hello

I received a message in my email:
Default security settings for your tenant will turn on on Tuesday, February 13, 2024
This setting will enable MFA for all users. My company is not ready for all users to use MFA.
I found a tutorial where you can create a conditional clause that allows you to set an exception. The problem is that the option is not available, we use basic licenses.
So is there an option like turning off MFA and leaving it on for some users?

Thank you for your help.

    • Tomas_Dudek's avatar
      Tomas_Dudek
      Copper Contributor

      Kidd_Ip

      Hi, thank you for your reply. Yes, I know this choice and I know that this choice will be changed. If I turn off the option after this date, it will take some time for the change to be reflected in users. But I want to prevent my colleagues from not having access to email. That's why I'm looking for a solution that won't be affected by the change.

  • Tomas_Dudek's avatar
    Tomas_Dudek
    Copper Contributor
    Hello
    we proceeded in the following way. We bought a license
    Azure Active Directory Premium P1. Now I can create conditional groups within the Entra portal.
    I would like to form two groups. One will have MFA enabled and the other group will have MFA disabled.
    I can then turn on the default policy with those groups.
    The problem is that I don't know how to set groups using conditional access.
    Thank you for your help.
    • Tomas_Dudek's avatar
      Tomas_Dudek
      Copper Contributor
      Hello,
      the problem seems to be solved. Just create any conditional access and the security in Entra is fine.
      Thank you for your help.

Resources