Forum Discussion
Does Azure MFA / Conditional Access work on native Android / iPhone clients?
So if I enforce MFA (via AAD MFA setting), can I then use Conditional Access to bypass it based on my criteria?
Or do I pretty much have to make the choice to go all on, or use Conditional Access and accept what is not covered?
I think it is either Conditional Policy or enforce MFA. If your criteria is location based rule and is to bypass MFA for trusted IPs and internal IPs(ADFS Claim), you can still specify those IPs in the service settings section in Azure AD MFA console. This will apply MFA policy to all apps.
If you noticed, there is a setting in the "Access Controls" section in Conditional Access Policy (v2), there is an option to specify "Require Approved client app". This does not include "Browser" as a client at the moment. I would really like to see this feature extended to Approved clients and Approved browser, which will allow us configure Conditional Access Policies to all/targeted cloud apps using CAP v2 conditions/rules.
The latest version of the iPhone mail client should support ADAL/MFA.
