Forum Discussion
Excluding user to MFA with conditional access
Im having some issues with excluding users from MFA with conditional access. The user what im trying to exclude is an functional account. But the thing is, this account is both in the including and e...
Im not sure what you mean with the what if tool. I checked the sign in logs in Azure and it says Single-factor authentication on the Basic info tab. On the Conditional Access tab is no info displayed. It only says Not applicable. The authentication Details is also empty with no information.
I just logged in with this account, and i'm still getting a MFA registration prompt in Office365.
I just logged in with this account, and i'm still getting a MFA registration prompt in Office365.
- Thanks for the link. I've been able to use the What if option. It seems that the CA policies are not applied because of Users and Groups. Why's that? The state of the policies are set to On.
- Not applied could also mean that the user is being excluded. Is it the same in Azure sign-in logs? Is the issue only with 1 CA policies or all? Are you licensed for CA?
- The user is member of 2 Azure groups, where one is included and one excluded. And i want the user to be excluded. Microsoft says exclusion will override inclusion. So the user should be excluded now.
There are multiple CA policies that are not applied. All of them, except 'only Block access for unknown or unsupported device platform' is applied.
I see that the Azure Active Directory subscription is active.