Is this also valid for ADB2C?

生 先 1 Reputation point
2022-03-07T15:14:17.1+00:00

I am implementing MFA with ADB2C and would like to switch MFA for each user.
Then I found this page. This is written about AD, but is it the same for ADB2C?
https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates

Microsoft Security Microsoft Entra Microsoft Entra External ID
Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator
    2022-03-07T21:22:45.353+00:00

    Hi @生 先 ,

    Enabling per-user MFA in Azure AD B2C

    You would not enable per-user MFA in the same place as you would in regular Azure AD, since the functionality is slightly different in Azure AD B2C. In Azure AD B2C, if you want to enable MFA per user, you have two main options:

    1) User flows

    2) Custom policies

    This is documented in the guide for enabling MFA in B2C.

    In the User Flows, you have the choice between enabling MFA for all users, turning it off for all users, or enabling conditional access MFA based on particular criteria.

    180772-image.png

    In the Custom policies, you can flag the users you would like to enroll in MFA with an extension attribute. There is an example of this use case here that you could copy.

    See also: Invalid user name when I enable per-user MFA in B2C

    Let me know if this helps.

    -
    If this answer was helpful to you, please consider marking as answer so that others in the community with similar questions can more easily find a solution.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.