For 365, we do not require MFA for student accounts (per superintendent). Does migrating to the Authentication methods policy in Entra ID still allow us to allow students to login without MFA?

Question

Yes, I know MFA should be on for all users, but we are being required to leave it off for Students. We also do not have licensing to use Conditional Access. Once we migrate to the Authentication methods policy in Entra ID, will we still have the option of NOT enabling MFA for some users (students)? I've searched for this and not found a clear answer, but it seems the migration just puts the type of authentication methods in a new management area together, but doesn't force MFA on all accounts. Is that correct?

Answer 1

Hi Brian Hall,

Thank you for posting your query on Microsoft Q&A!

You are correct, migrating to Authentication methods policy in Entra ID will not enable MFA for your users who are currently not enabled for MFA.

If you have any P1 or P2 licenses one thing to keep an eye on is the "Microsoft Managed" Conditional Access policies, these may appear in your tenant and if not disabled within 90 days can prompt your users to setup MFA. We have details on these here - https://learn.microsoft.com/en-us/entra/identity/conditional-access/managed-policies

Let me know if you have any further questions or concerns, I would be happy to help!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.