Forum Discussion
Solved
MFA: can I make registering MFA optional but then require it for signing in?
Can I make registering for Azure MFA optional but if it is configured on an account then require it for signing in? Example: If I set up MFA on an account that is not MFA-enabled or MFA-enforced, t...
MFA is not a self-service, you as the admin determine which users require it (either by directly enforcing or using CA policy), and only then the users can register.
It depends on how you are configuring MFA. If it's via the MFA portal, the user will have to register after his currently valid token expires. If it's via Conditional access policy, the user will have to register only when it hits some resource that requires MFA.
VasilMichev I only want to require MFA if the user has registered for it. Is this possible?
MFA is not a self-service, you as the admin determine which users require it (either by directly enforcing or using CA policy), and only then the users can register.
- OK, that answers my question. Thank you!