Forum Discussion
Migrate users from Office 365 multi factor authentications to Azure conditional accss
Hi all, We enabled Office 365 MFA in our organization (We have E1 licensing). We recently discovered that Microsoft enabled for us Azure conditional access where we can let the users work without...
Well we were able to set up conditional access to some extent, we were able to disable office MFA for a user and set that user with conditional access and it works pretty well.
My question is if there is any way to migrate the user to conditional access without a lot of user intervention mainly re-setting the user's second authentication device.
Some things like Azure AD Premium stuff will activate with one license or when a trial is spun up and will stay in the tenant, and just because you can doesn't mean you don't need a license for it ;). You don't want to get stuck in an audit scenario and have Premium features configured with no licenses on your tenant. I'd triple check it before rolling it out with Microsoft / Reseller but pretty sure you need a licenses for any conditional access just to be sure.
- The conditional access options are limited, we have 4 options: 1 is required MFA another is device registration and 2 more that I don't remember.
When we found out about it, it was with a certified Microsoft consultant which was shocked as we were.
Because these options are sufficient to our needs, we would like to roll it out.Your users will always have to be configured for MFA. Depending on your wishes you can define your conditional access but your users need to have their MFA setup.
- While reading your answer I realized that my question should be different:
Is it correct to assume that if I enabled office MFA and afterwards added the user to conditional access the user, the conditional access won't apply and I will have to disable the office MFA in order for conditional access to work. This will force the user to re-set it's authentication device.
So the transition will never go smoothly...
