Forum Discussion
Require MFA OR Intune Enrollment/compliance when Outside the Trusted IP Range
My company is currently piloting MFA and we have recently deployed Intune for corporate Mobile devices. We have our MFA setup so it only requires 2 step verification when a device is outside the cor...
Omar, any chance you found a solution to not force MFA for compliant devices? I too have the same requirements, where we do not want to prompt for MFA when using a device that is "compliant".
It seems the conditional access policies simply do not work, at least in my experience. I've configured a policy to require a device to be compliant, I can see the device is marked YES for compliant in Azure AD. However, when using the same device to access to applications defined in the policy, I get he sorry, you can only access from "Devices or client applications that meet management compliance policy."
James,
Did you figure out your issue?
We had the issue, but that’s because we were using MFA via our office 365 and not though intune. Disabled O365 MFA and added it to Intune. That corrected it for us.
Did you figure out your issue?
We had the issue, but that’s because we were using MFA via our office 365 and not though intune. Disabled O365 MFA and added it to Intune. That corrected it for us.
