Access work or School Error

Question

Hi,

User receives prompt to verify their Azure Credentials with MFA in access work or School for successful sync

Questions are:

1. If user doesn't authenticate, then device will never sync in Intune and receive updates, policy etc
2. Is it dependent on Azure MFA to verify and check-in Intune or its independent

Answer 1

Hi @Sonam Kandoi

1) At first time , Your device is enrolled when you scan the QR code and insert the code from MFA. - If you doesn't authenticate at this point , then yes your device wont sync.
After First online when your device enrollment is complete, then its just a matter of login to your portals. Policies syncing doesn't require additional MFA.

2) Its dependent on policy , For example If there is a conditional access policy like If user is in USA and trying to access cloud apps then enforced MFA . You will be forced to MFA even when MFA was not required. Another example if user belong to certain groups are forced to MFA.

Refer below articles for more details

1) Enrollment : https://learn.microsoft.com/en-us/mem/intune/enrollment/multi-factor-authentication
2) Policy Base MFA : https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa

-------please don't forget to upvote and Accept as answer if the reply is helpful-------