Require managed device for MFA

Question

Hi everyone,

i have to look for a way to block the ability to generate codes for MFA on not managed devices. But i am a bit stumped right now. Can't find anything in the documentation if it is possible or not.

Maybe a combination of CA and Intune?

Could be a language barrier on my side.

Has anyone else ever had this requirement?

Thank you for ideas and/or help!

Answer 1

Thank you for asking this question on the Microsoft Q&A Platform.

Try these steps:

1. Open the Azure AD Portal and open the Directory (“Azure Active Directory”).
   
2. Open “Security”.
   
3. Open “MFA”.
   
4. Click on “Additional cloud-based MFA settings”.
   
5. The classic Active Directory / Office 365 Portal opens. Choose the desired allowed Authentication Methods under “Verification options”. Don’t forget to click on “Save”.
   

Source: https://diecknet.de/en/2022/02/02/How-to-configure-M365-azure-ad-MFA-methods/

Hope this helps!

---

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.