Forum Discussion
Exclude MFA for Non Users
1. You can create a Conditional Access policy based on "All guest and external users", "Directory roles" and "Users and groups". I don't think that you can filter out service accounts (non user identities). But
2. You can create a Dynamic User group. And add users to the group based on their names.
For example, you create a new Conference room account. Give it a name like "Conference-A102". So the rule should be like this: If the "username" contains "Conference" move it to the "Conference Room" group. Same with other types of non user identities.
Hello Ask_Ak,
You can use different groups for those "non user" identities.
For example, "Teams Rooms" for teams rooms, "Conference Rooms" for conference rooms, etc.
This will allow you to exclude the "non user" identities from the main MFA policy but in the future you will be able to create a separate CA policy for them (for example, to restrict access to those accounts from non company IP addresses.
1. You can create a Conditional Access policy based on "All guest and external users", "Directory roles" and "Users and groups". I don't think that you can filter out service accounts (non user identities). But
2. You can create a Dynamic User group. And add users to the group based on their names.
For example, you create a new Conference room account. Give it a name like "Conference-A102". So the rule should be like this: If the "username" contains "Conference" move it to the "Conference Room" group. Same with other types of non user identities.
