Forum Discussion
veryConfused
Dec 15, 2021Copper Contributor
Issue with two MFA . Disabling one MFA based on rules
Question is regarding authentication(s) in Azure AD for this set-up. To comply with security requirements customer has enabled MFA for their tenant and we have enabled MFA for our service hosted in o...
- Dec 16, 2021
Hi veryConfused,
So If I understand your question correctly, and If I'm not, please correct me.
You have User A in Tenant A and Tenant B (I assume as a guest user)? If this is the case, then it's correct that you need to configure Azure MFA twice. The reason for this is straightforward; your (authentication) methods are configured per tenant. This means, if you have configured your Authenticator in Tenant A, it won't be synchronized to Tenant B since this is a Unique user per tenant.
If you receive an invite for another environment in the future, and they have configured Azure MFA as required, you should again configure MFA for this particular tenant.
I hope this isn't veryConfused ;-). And if you still need some help, please let me know.
veryConfused
Dec 16, 2021Copper Contributor
ChristianJBergstrom, BilalHead has explained the issue more clearly in the answer. and I would like to know if MFA can be configured on case to case basis for tenant B. thats one of the way I am thinking, if that is possible?
Dec 16, 2021
Just adding for reference https://docs.microsoft.com/en-us/azure/active-directory/external-identities/current-limitations#possible-double-multi-factor-authentication