Forum Discussion

Brass Contributor

Jan 30, 2020

Solved

(AAD) I want to force security info registration only for certain users

This seems silly but I'm not seeing a way: The bulk of my users won't be licensed for MFA/SSPR, so I only want to force security info registration during logon for users that are assigned one of our ...

azure active directory

Multifactor Authentication

security

Thijs Lecomte
Jan 31, 2020
Jup! It will require them to register.

You will not lock them out through CA

Thijs Lecomte

Bronze Contributor

Jan 31, 2020

ajm-b

You could create a dynamic group that contains all licensed users and scope the conditional access policies to them: https://365bythijs.be/2020/01/20/creating-a-dynamic-group-with-all-aad-premium-licensed-users/

ajm-b
Brass Contributor
Jan 31, 2020
Thijs Lecomtethanks for the feedback! Could you clarify something? So requiring MFA via Conditional Access policy on an account that hasn't yet registered will prompt them to register during their next sign-on instead of just locking them out, correct?
- Thijs Lecomte
  Bronze Contributor
  Jan 31, 2020
  Jup! It will require them to register.
  
  You will not lock them out through CA