Conditional Access control MFA and MS Teams
Hi, We control our MFA for users via Control Access. One policy is for External Device and Non-Complaint Device (In the conditions, Hybrid Join and Complaint are excluded). This so if anyone (even a Account on tenant) uses an 'unknown' device they will be prompted for MFA, which has s sign frequency of 12 hours The problem (not really a problem in my eyes), the users have asked for MFA only to appear during setup of the Device for Outlook and Teams. I excluded outlook for the first policy and create the same policy to only include Outlook and remove the sign frequency of 12 hours, This worked for the Outlook, got the MFA during adding the account to outlook. Then I added teams to the second policy and excluded it from the first. I setup teams got the MFA prompt as expected, but the next I got the prompt for MFA for teams the next day, but not outlook, I did the same with Skype for Business (as I have with outlook and teams) included and excluded for the policy, the following days still got the MFA prompt for teams. I know teams uses different services within MS365, would I also need to exclude SharePoint? some I really don't what to do.
Disable MFA on free version of Teams
I am attempting to set up a free Teams system for a small church whose services have been cancelled due to the corona virus. Teams has everything they have asked for and will enable the older members of the congregation to stay in contact. However many of these older members do not have smart phones and are not computer savvy - for obvious reasons we are trying to avoid going house to house breaking the social distancing rules to help them set up teams. I am confident i can get them set up with an email but they are having a very hard time with the fact that free teams appears to require MFA. They don't know what to do, are forced into an installation process which is not at all intuitive for them. I cannot seem to find a way, in the free teams version, to disable the MFA requirement - even when the users Microsoft account specifically has it disabled. Is there a way to remove this requirement? it is preventing them from being able to use teams to communicate and share.