{"id":14386,"date":"2023-10-02T16:36:35","date_gmt":"2023-10-02T20:36:35","guid":{"rendered":"https:\/\/www.itcloud.ca\/?page_id=14386"},"modified":"2023-10-03T13:12:37","modified_gmt":"2023-10-03T17:12:37","slug":"how-to-not-enforce-multi-factor-authentification-at-the-office","status":"publish","type":"page","link":"https:\/\/www.itcloud.ca\/en\/how-to-not-enforce-multi-factor-authentification-at-the-office\/","title":{"rendered":"How to not enforce multi-factor authentification at the office"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"How\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

How to not enforce multi-factor authentication at the office <\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Situation<\/h3>

Multi-factor authentication is enabled for users at your client, but now <\/span>you’re<\/span> being asked the following question<\/span>:<\/span><\/span>\u00a0<\/span><\/p>

Is there a way to avoid users working from the office having to enter multiple credentials that are <\/span>required<\/span> every time they want to access Microsoft cloud applications?<\/span><\/span>\u00a0<\/span><\/span><\/strong><\/p><\/blockquote>

You can <\/span>tell <\/span>them <\/span>that yes t<\/span>here is a way to solve this situation. The solution is to use Conditional Access policies.<\/span><\/span>\u00a0<\/span><\/p>


Context<\/h3>

Nowadays users are bombarded with all kinds of requests that try to make them believe that they must reveal their username and password to gain access to content that is not legitimate. These requests have only one goal, that the user falls for the trap and gives the requested information.<\/span>\u00a0<\/span><\/p>

\u00a0<\/span>Knowing that the user’s account is the gateway to the organization’s data, it stands to reason that enabling multi-factor authentication to reduce the possibility of accounts being compromised is a good decision.<\/span>\u00a0<\/span><\/p>

\u00a0<\/span>\u201cWith strong multi-factor authentication (MFA) in Azure Active Directory (Azure AD), protect your organization against breaches related to lost or stolen credentials.\u201d<\/span>1<\/span>\u00a0<\/span><\/p>


Solution<\/h3>

It is possible to create an exception to the multi-factor authentication requirement for users when they authenticate using \u201cUsing the location condition in a Conditional Access policy\u201d<\/span>2<\/span>\u00a0<\/span>available in Azure Active Directory now call Microsoft Entra ID<\/span>3<\/span>.<\/span>\u00a0<\/span><\/p>

\u00a0<\/span>To meet the customer’s need, the additional Conditional Access policy simply targets the users in question and does not require them to use multi-factor authentication when authenticating from a named location.<\/span>\u00a0<\/span><\/p>

\u00a0<\/span>A named location can be defined as follows in the following scenarios:<\/span>\u00a0<\/span><\/p>