Forum Discussion
Removing MFA for a group of users
Hi Galaxy876
You can create an additional Conditional Access policy that requires MFA but exempts Trusted Locations. Assign this policy specifically to the employee group, and make sure to exclude this group from your primary policy, which mandates MFA from any location. This setup ensures that users in the group won't need to perform MFA when working on-site but will still need to do so from other locations. Users not in the group will be governed by the primary policy requiring MFA from any location. Hope this helps.
Hi Galaxy876
You can create an additional Conditional Access policy that requires MFA but exempts Trusted Locations. Assign this policy specifically to the employee group, and make sure to exclude this group from your primary policy, which mandates MFA from any location. This setup ensures that users in the group won't need to perform MFA when working on-site but will still need to do so from other locations. Users not in the group will be governed by the primary policy requiring MFA from any location. Hope this helps.
