Multi country successful

Noisy-6527 21 Reputation points
2022-03-03T07:30:48.093+00:00

Good morning.

Is it possible to authenticate from a new device only with your username and password if you have MFA activated?

Thx.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,149 questions
0 comments No comments
{count} votes

Accepted answer
  1. AmanpreetSingh-MSFT 56,746 Reputation points
    2022-03-03T08:26:41.28+00:00

    Hi @Noisy-6527 • Thank you for reaching out.

    Based on the information you have provided in your question, I understood that you encountered a successful sign-in event, for an MFA-enabled user account, from a new device in a different country without performing 2nd-factor authentication. Please correct me if I misunderstood it.

    If this is the case, please check if you have enforced MFA via a Conditional Access policy. In a conditional access policy, you can use the below option to include/exclude specific countries based on which MFA will not be triggered for the countries which are not in the scope of the policy.

    179528-image.png

    In the above example, all users who are added to the CA Policy will be required to perform MFA for the Cloud Apps included in the policy with an exception for the country France. This means, the policy won't apply to users signing in from France and MFA won't be required. They can simply supply their Username and Password for successful authentication.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.