MFA possibilities on Shared account

Question

MFA possibilities on Shared account

Sultanul Arif 20

I have multiple shared accounts, and I am trying to set up MFA to their accounts for security purpose. How can I do this effectively? Does anyone have KB article that can guide me through the process?

0 comments

Answer accepted by question author

Andy David - MVP 160.3K MVP Volunteer Moderator

Can you define "shared accounts"? You really cant MFA a shared account for multiple users.

Sultanul Arif 20 Reputation points

2025-01-16T21:27:28.91+00:00

Okay. So, is there any other way of adding another layer of security on the shared account?
Sultanul Arif 20 Reputation points

2025-01-16T21:31:26.37+00:00

Okay. Is the any other way to add an extra layer of security on shared accounts?
Bruce (SqlWork.com) 85,281 Reputation points

2025-01-16T21:33:13.2733333+00:00

again, define what you mean by "shared" account.
Sultanul Arif 20 Reputation points

2025-01-20T19:16:27.03+00:00

By Shared account I mean - multiple user using the same devices and accounts. So what I've done to address this issue is, I created a security group and added all the shared accounts to the group. And created a conditional access policy that will let this account to log in only from our network.

1 additional answer

Your answer

Sultanul Arif 20 Reputation points

2025-01-16T21:27:28.91+00:00

Okay. So, is there any other way of adding another layer of security on the shared account?
Sultanul Arif 20 Reputation points

2025-01-16T21:31:26.37+00:00

Okay. Is the any other way to add an extra layer of security on shared accounts?
Bruce (SqlWork.com) 85,281 Reputation points

2025-01-16T21:33:13.2733333+00:00

again, define what you mean by "shared" account.
Sultanul Arif 20 Reputation points

2025-01-20T19:16:27.03+00:00

By Shared account I mean - multiple user using the same devices and accounts. So what I've done to address this issue is, I created a security group and added all the shared accounts to the group. And created a conditional access policy that will let this account to log in only from our network.

Answer 1

sharedinbox 0

There are a few solutions. You can delegate access so as to provision individual users with access while maintaining separate credentials. Depending on your subscription tear conditional access policies may be available which let you define the conditions under which MFA is triggered in order to reduce the number of unnecessary MFA prompts. You can also try Authenticator app instances. Alternatively you can set up a webhook that forwards the MFA code to the interested parties of the shared account. If you are not a developer there is an app Salepager that can do this for you.

0 comments