can't disable/delete Conditional Access policy for MFA to all users

Question

In my Contoso Electronic test tenant.

I setup MFA for Tenant administrator and it create an CA policy for MFA to all users all Applications.

After I can't delete any longer that CA policy .......... and I see in the MFA for users that no one has it setup ..... not sure why I canto turn the CA policy off.

I can't change security default because is controlled by CA ...... so I'm completely deadlock.

Can someone provide guidance ?

Answer 1

Hi Paulo,

To help partners protect their businesses and customers from identity theft and unauthorized access, we activated more security safeguards for partner tenants. These safeguards mandate and verify MFA. Mandating MFA helps partners to secure their access to customer resources against credentials compromise.

Partners participating in the Cloud Solution Provider (CSP) program, Control Panel Vendors (CPVs), and Advisors must implement the Partner Security Requirements to stay compliant.

Partners are required to enforce MFA for all user accounts in their partner tenant, including guest users. Users must complete MFA verification for the following areas:

• Partner Center
• Partner Center API
• Partner Delegated Administration

https://learn.microsoft.com/en-us/partner-center/partner-security-requirements-mandating-mfa

Answer 2

Hi,

What about service accounts that need to be exempted from MFA, especially service accounts that are integrated with third-party tools?