Sign in with the test user account (ex: MFATestUser) that you have added as a member of the test security group (ex: MFA-Security-Group).

Open a new browser window in InPrivate or Incognito mode or create a new user profile in the browser.

Once you successfully created the Conditional Access policy that grants access only with Azure MFA, follow the below steps to check the MFA user login-in flow. Verify MFA Sign-in with Test user account Now, you can sign in with the test user into any one of the Microsoft 365 applications (ex: Teams) and check the MFA prompt.

The new CA policy is created successfully.

On the Conditional Access policies page, click + New policy and select Create new policy.

In the Security page, on left-side navigation, select Conditional Access in the Protect section.

On the Azure Active Directory pane, on left-side navigation, select Security in the Manage section.

Later, you can add more users to this group if everything works fine with the test user.Ĭreate a Conditional Access policy and Configure MFA settingsįollow the below steps to create a new CA policy and assign it to security group members. We will assign the new CA policy to this group.

A security group (ex: MFA-Security-Group) that includes the test user as a member.

A test user account (ex: MFATestUser) to verify the end-user MFA experience.

Azure AD tenant with Azure AD Premium P1 (minimum) or trial license enabled for all the required users.

Requirements to set up MFA with CA policy

Verify MFA Sign-in with Test user account.

Create a Conditional Access policy and Configure MFA settings.

Requirements to set up MFA with CA policy.In this post, we will explore how to create a new Conditional Access policy in Azure AD and configure MFA for users via security group membership. For example, enforce MFA when users sign in from unmanaged devices, untrusted IPs, or untrusted locations. We can use the Multi-factor Authentication with Conditional Access to enable MFA for users during specific sign-in conditions. In Azure AD, the Conditional Access policy gives the flexibility to secure Microsoft 365 applications based on different criteria and conditions.

Conditional access mfa