Home

Pre-Register and/or ONLY force registration of Azure MFA for users without enable MFA on the account

%3CLINGO-SUB%20id%3D%22lingo-sub-253158%22%20slang%3D%22en-US%22%3EPre-Register%20and%2For%20ONLY%20force%20registration%20of%20Azure%20MFA%20for%20users%20without%20enable%20MFA%20on%20the%20account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-253158%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20often%20been%20asked%20by%20customers%20if%20it%20is%20possible%20to%20pre-register%20(even%20bulk)%20users%20for%20MFA%20but%20don't%20enable%20it%20directly%20for%20the%20whole%20account%2C%20because%20they%20want%20to%20use%20it%20in%20Conditional%20Access.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20I%20did%20a%20blog%20post%20on%20that%20recently%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fjustidm.wordpress.com%2F2018%2F09%2F14%2Fbulk-pre-register-mfa-for-users-without-enable-mfa-on-the-account%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E(Bulk)%20pre-register%20MFA%20for%20users%20without%20enable%20MFA%20on%20the%20account%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20thing%20that%20is%20often%20been%20asked%20is%2C%20if%20it%20is%20possible%20to%20only%20force%20the%20registration%20for%20Azure%20MFA%20but%20also%20don't%20activate%20it%20on%20the%20account%2C%20mostly%20because%20MFA%20should%20be%20used%20in%20Conditional%20Access.%3C%2FP%3E%3CP%3ECurrently%20you%20need%20an%20AAD%20P2%20license%20for%20that%20and%20set%20the%20MFA%20registration%20policy%2C%20but%20I%20found%20a%20NEW%20way%20to%20do%20that%20without%20this%20license.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESee%20my%20blog%20post%20about%20that%20here%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fjustidm.wordpress.com%2F2018%2F09%2F15%2Fforce-azure-mfa-registration-without-enabling-mfa-on-the-user%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3EForce%20Azure%20MFA%20registration%20without%20enabling%20MFA%20on%20the%20user%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20that%20is%20valuable%20for%20you.%20Feel%20free%20to%20comment%20or%20share%20updates%2C%20additions%2C%20corrections%20to%20what%20I%20wrote.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%2FPeter%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-253158%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Active%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMulti-Factor%20Authentication%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Peter Stapf
Occasional Contributor

I'm often been asked by customers if it is possible to pre-register (even bulk) users for MFA but don't enable it directly for the whole account, because they want to use it in Conditional Access.

 

So I did a blog post on that recently:

(Bulk) pre-register MFA for users without enable MFA on the account

 

Another thing that is often been asked is, if it is possible to only force the registration for Azure MFA but also don't activate it on the account, mostly because MFA should be used in Conditional Access.

Currently you need an AAD P2 license for that and set the MFA registration policy, but I found a NEW way to do that without this license.

 

See my blog post about that here:

Force Azure MFA registration without enabling MFA on the user

 

Hope that is valuable for you. Feel free to comment or share updates, additions, corrections to what I wrote.

 

/Peter

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
50 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
32 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
15 Replies
Discussion - Updating our interface with Fluent touches
Elliot Kirk in Discussions on
102 Replies