Activate conditional access strategies to block legacy authentication 99%

Question

Hi everyone,

To raise my identity secure score, I tried to "Activate conditional access strategies to block legacy authentication" but in the guide it says that I have to exclude at least one account :

So eventually I obtain 99% success rate but is there a way to have 100% ?

Answer 1

Hi Loïc,

Thank you for posting your query on Microsoft Q&A!

You can safely ignore this message "Exclude at least one account to prevent yourself from being locked out. If you don't exclude any account, you won't be able to create this policy."

Since you are targetting only legacy clients then you will not be blocked from logging into the Entra ID portal, so in the event you need to add exclusions at a later time, you can simply modify the Conditional Access policy.

I will make a request to remove that message from our document.

Let me know if you have any further queries, I would be happy to help!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.