Forum Discussion

Gurdev Singh's avatar
Gurdev Singh
Iron Contributor
Jun 07, 2018
Solved

Best practise - Keeping a generic Office 365 Global Admin account free from all policies

Quite a while ago, it was recommended to have a generic account for Office 365 to act as a sort of last resort if the regular synced accounts fail to login for some reasons.    Anyone know if this ...
  • VasilMichev's avatar
    Jun 07, 2018

    If you are using AD FS, yes it's recommended to have at least one cloud-only GA. Make sure to protect it via MFA though, or at the very least configure an Conditional access policy to require MFA on "unknown" locations.