How would I go about setting up CA for our environment, so that MFA isn't required?

Lee van Rooyen (Platinum Life) 0 Reputation points

So I have been made aware that MS is forcing MFA on their tenants. Now I am still inexperienced when it comes to MS Cloud, Azure and Entra. Now we have a few different tenants and an on-prem environment. Now while we are getting our users on it we will need to have a few exculsions, Mainly service accounts. We use quite a few that handle everything from simple email accounts for meeting setups to running SQL jobs on our cloud servers.
I have read that by Disabling the security defaults and adding some conditional access policy we can achieve it though I'm not sure how to set those up. I like to know which SC exam coursework I can work through to better understand it.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
702 questions
Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
367 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Crystal-MSFT 45,251 Reputation points Microsoft Vendor

    @Lee van Rooyen (Platinum Life), Thanks for posting in Q&A. From your description, it seems the Microsoft-managed Conditional Access policies are enabled on your tenant. And you want to set some exclusion. You can follow the video in the following link to see if we can set the exclusion or set the policy to off to see if we can disable it.

    User's image

    Hope the above information can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.