Disable global MFA for a specific Application (client) ID that requires ROPC

Question

Disable global MFA for a specific Application (client) ID that requires ROPC

Luis Alves 1

My organization has configured the MFA for all applications (globally). Which is great as it improves overall security.
But how can it be disabled only for an Application (client) which is legacy and requires Resource Owner Password Credentials (ROPC) flow?

regards

Anonymous

2020-10-29T19:08:03.707+00:00

Hi! Have you looked at this document? It details conditional access policies. You'll need to create one and select ROPC for your client application. Please let me know if I can help with anything else!
Martin1011 1 Reputation point

2020-11-02T07:14:59.467+00:00

I already thought this would require a separate conditional access policy for the application, but how do I choose ROPC for this application? I do not find the point where I configure it in the policy.