Forum Discussion
Excluding user to MFA with conditional access
Im having some issues with excluding users from MFA with conditional access. The user what im trying to exclude is an functional account. But the thing is, this account is both in the including and e...
Exclusion overrides inclusion policy. I will suggest to validate the CA policies against the user in question using the what if tool and also analyse the sign in logs.
Im not sure what you mean with the what if tool. I checked the sign in logs in Azure and it says Single-factor authentication on the Basic info tab. On the Conditional Access tab is no info displayed. It only says Not applicable. The authentication Details is also empty with no information.
I just logged in with this account, and i'm still getting a MFA registration prompt in Office365.
I just logged in with this account, and i'm still getting a MFA registration prompt in Office365.
- Thanks for the link. I've been able to use the What if option. It seems that the CA policies are not applied because of Users and Groups. Why's that? The state of the policies are set to On.
- Not applied could also mean that the user is being excluded. Is it the same in Azure sign-in logs? Is the issue only with 1 CA policies or all? Are you licensed for CA?
