Hello, I am struggling here with Conditional Policy feature, were I am trying to enforce MFA over Azure Portal, but I am unable to find that there: <a href="https://filestore.community.support.microsoft.com/api/images/e02ef2eb-048a-44fc-9814-daafc28fac8e?upload=true&fud_access=hC1SxZhn7m%2FZQJkOIiOVstu10yTQgXS4A%2FDBzZTg8nbaCgIogkrcDydMeI5Y4za2dOqDdWtsG2JNS3E35V60i9TiGHR7STMpJHheeXuDvO8nwjUlqCBHhJ0NDvuYN7OSOcaqg4MJNWdNv7OJCsm2moi7ILsofTn3mLFM1DtWPRP%2BQM7O2aSQJKxNhGDnayWOcgngjrxnzN5p0pXhFi%2Beu8c%2BGfPIGJv2UpExEQL18F8bOC6AtcQLH2UAGM90EYv%2BdlI07W21ye%2FmIDcEZwIrwhMFv5Hgbw0F2aC3G9LcjM9CacqxY9hbkr4kDO0WKIPjKclC8y8c3ctZyXIlaZpmD5ZAzspsLqPM3VAJqRCiDhz6fl2cqoeNbZy07efGnCXL0c6815%2FMvKpRVriwKWp%2Ff3841Ra%2FU1afafI5Htlcn%2Bw%3D" rel="ugc nofollow"><img src="https://filestore.community.support.microsoft.com/api/images/e02ef2eb-048a-44fc-9814-daafc28fac8e?upload=true&fud_access=hC1SxZhn7m%2FZQJkOIiOVstu10yTQgXS4A%2FDBzZTg8nbaCgIogkrcDydMeI5Y4za2dOqDdWtsG2JNS3E35V60i9TiGHR7STMpJHheeXuDvO8nwjUlqCBHhJ0NDvuYN7OSOcaqg4MJNWdNv7OJCsm2moi7ILsofTn3mLFM1DtWPRP%2BQM7O2aSQJKxNhGDnayWOcgngjrxnzN5p0pXhFi%2Beu8c%2BGfPIGJv2UpExEQL18F8bOC6AtcQLH2UAGM90EYv%2BdlI07W21ye%2FmIDcEZwIrwhMFv5Hgbw0F2aC3G9LcjM9CacqxY9hbkr4kDO0WKIPjKclC8y8c3ctZyXIlaZpmD5ZAzspsLqPM3VAJqRCiDhz6fl2cqoeNbZy07efGnCXL0c6815%2FMvKpRVriwKWp%2Ff3841Ra%2FU1afafI5Htlcn%2Bw%3D" alt="" /> <a href="https://filestore.community.support.microsoft.com/api/images/5686941b-000a-49fe-bf4c-b1ad4495ea83?upload=true&fud_access=hC1SxZhn7m%2FZQJkOIiOVstu10yTQgXS4A%2FDBzZTg8nbaCgIogkrcDydMeI5Y4za2dOqDdWtsG2JNS3E35V60i9TiGHR7STMpJHheeXuDvO8nwjUlqCBHhJ0NDvuYN7OSOcaqg4MJNWdNv7OJCsm2moi7ILsofTn3mLFM1DtWPRP%2BQM7O2aSQJKxNhGDnayWOcgngjrxnzN5p0pXhFi%2Beu8c%2BGfPIGJv2UpExEQL18F9ncggjsPf8Zqt6uVm4kzPoujiNRcoB8MN1oxcmVjfKhPIUxmxKgAQDAaEubgG1GODvRBCeGE6nA%2BoKFmZrjT2q9tvKWjmS9vATPl7xKqklB8WJnxxp0TiAkPyET9A8ERrDqwbTAwj%2FvBhUGRj9hXIan1PMOucsgUJ7r%2BV94RBrtWdcvLW8smaRlUy1Ym8ZP4Y%3D" rel="ugc nofollow"><img src="https://filestore.community.support.microsoft.com/api/images/5686941b-000a-49fe-bf4c-b1ad4495ea83?upload=true&fud_access=hC1SxZhn7m%2FZQJkOIiOVstu10yTQgXS4A%2FDBzZTg8nbaCgIogkrcDydMeI5Y4za2dOqDdWtsG2JNS3E35V60i9TiGHR7STMpJHheeXuDvO8nwjUlqCBHhJ0NDvuYN7OSOcaqg4MJNWdNv7OJCsm2moi7ILsofTn3mLFM1DtWPRP%2BQM7O2aSQJKxNhGDnayWOcgngjrxnzN5p0pXhFi%2Beu8c%2BGfPIGJv2UpExEQL18F9ncggjsPf8Zqt6uVm4kzPoujiNRcoB8MN1oxcmVjfKhPIUxmxKgAQDAaEubgG1GODvRBCeGE6nA%2BoKFmZrjT2q9tvKWjmS9vATPl7xKqklB8WJnxxp0TiAkPyET9A8ERrDqwbTAwj%2FvBhUGRj9hXIan1PMOucsgUJ7r%2BV94RBrtWdcvLW8smaRlUy1Ym8ZP4Y%3D" alt="" /> The only one that I have found was this one but still no match's for a group of users: <a href="https://filestore.community.support.microsoft.com/api/images/498e3c2a-fa2d-4c42-bf02-c662579c4af5?upload=true&fud_access=hC1SxZhn7m%2FZQJkOIiOVstu10yTQgXS4A%2FDBzZTg8nbaCgIogkrcDydMeI5Y4za2dOqDdWtsG2JNS3E35V60i9TiGHR7STMpJHheeXuDvO8nwjUlqCBHhJ0NDvuYN7OSOcaqg4MJNWdNv7OJCsm2moi7ILsofTn3mLFM1DtWPRP%2BQM7O2aSQJKxNhGDnayWOcgngjrxnzN5p0pXhFi%2Beu8c%2BGfPIGJv2UpExEQL18F81zwtQuWFGO5WPfg8uRGizjrL%2Fl2EABLfAQNSFc2urYB8ahdHlExQHC%2BvChKQ2MaBCxdXjsV7DCru%2F4PM%2BnsC87Tc%2Fs7L76btiCHhePREMr3WQqNxlPpQDjpKGytKI1QOPK5RCBNpzfMAHbgOa0VATp5%2BB32aGLeE9Lh2ivDyMueYMOejoRaVQ1mnD8AgwVoM%3D" rel="ugc nofollow"><img src="https://filestore.community.support.microsoft.com/api/images/498e3c2a-fa2d-4c42-bf02-c662579c4af5?upload=true&fud_access=hC1SxZhn7m%2FZQJkOIiOVstu10yTQgXS4A%2FDBzZTg8nbaCgIogkrcDydMeI5Y4za2dOqDdWtsG2JNS3E35V60i9TiGHR7STMpJHheeXuDvO8nwjUlqCBHhJ0NDvuYN7OSOcaqg4MJNWdNv7OJCsm2moi7ILsofTn3mLFM1DtWPRP%2BQM7O2aSQJKxNhGDnayWOcgngjrxnzN5p0pXhFi%2Beu8c%2BGfPIGJv2UpExEQL18F81zwtQuWFGO5WPfg8uRGizjrL%2Fl2EABLfAQNSFc2urYB8ahdHlExQHC%2BvChKQ2MaBCxdXjsV7DCru%2F4PM%2BnsC87Tc%2Fs7L76btiCHhePREMr3WQqNxlPpQDjpKGytKI1QOPK5RCBNpzfMAHbgOa0VATp5%2BB32aGLeE9Lh2ivDyMueYMOejoRaVQ1mnD8AgwVoM%3D" alt="" /> <a href="https://filestore.community.support.microsoft.com/api/images/475e441b-c1e4-4cfb-af10-56dbd864f3b6?upload=true&fud_access=hC1SxZhn7m%2FZQJkOIiOVstu10yTQgXS4A%2FDBzZTg8nbaCgIogkrcDydMeI5Y4za2dOqDdWtsG2JNS3E35V60i9TiGHR7STMpJHheeXuDvO8nwjUlqCBHhJ0NDvuYN7OSOcaqg4MJNWdNv7OJCsm2moi7ILsofTn3mLFM1DtWPRP%2BQM7O2aSQJKxNhGDnayWOcgngjrxnzN5p0pXhFi%2Beu8c%2BGfPIGJv2UpExEQL18F88Fst1KTSs6NKUBGZOBFBEtslHXDk%2BIZCETmLxfhNvZv%2BW%2B2CG25O1xq28VFckrJnOhU4V1uEYPwIJp6cfnQRmCPRRiTqWAr3PQr2O%2BUbsZ9DJym%2BqD1kOZaD1TO57O60en%2Fl1%2Bw2r1AUpnKf%2F8jrUQ8wuHs%2FWuiZj7Z8xfmxnGzrOk5EbmZQr8wprqJVHEWI%3D" rel="ugc nofollow"><img src="https://filestore.community.support.microsoft.com/api/images/174d1f13-31b2-457b-8d3f-860d095b6560?upload=true&fud_access=hC1SxZhn7m%2FZQJkOIiOVstu10yTQgXS4A%2FDBzZTg8nbaCgIogkrcDydMeI5Y4za2dOqDdWtsG2JNS3E35V60i9TiGHR7STMpJHheeXuDvO8nwjUlqCBHhJ0NDvuYN7OSOcaqg4MJNWdNv7OJCsm2moi7ILsofTn3mLFM1DtWPRP%2BQM7O2aSQJKxNhGDnayWOcgngjrxnzN5p0pXhFi%2Beu8c%2BGfPIGJv2UpExEQL18F8ItwOZzzklPDefCPDrhnzNvMi1YjrIdl1JdBYDrD06S7313puNrZOPGmS9xZId3c50ELpYHyuqwX6WJnvaChoONc5snCWTBaP7apZr8LSdm%2B%2F29Rh2lqlv7tc4rS6dQFBp9%2BRBHIbe5J%2FZZLN3jZ2LiIqCJwP4h5p35g366At%2FH39Fo3wCWQJs0nrZwv3qksI%3D" alt="" /> How can I find this for the all Azure Portal?

Hello @godzillaKP , Thank you for reaching out. I would like to confirm that following would be the application which you need to use if you would like to target Azure Portal. For more information you can also refer following article: https://video2.skills-academy.com/en-us/entra/identity/conditional-access/how-to-policy-mfa-admin-portals I hope this helps. I hope this helps and hence would request you to please " Accept the answer " if the information helped you. This will help us and others in the community as well.

How can I set a Conditional Policy for all Azure Portal?

godzillaKP 46

Hello,

I am struggling here with Conditional Policy feature, were I am trying to enforce MFA over Azure Portal, but I am unable to find that there:

The only one that I have found was this one but still no match's for a group of users:

How can I find this for the all Azure Portal?

1 answer

Harpreet Singh Matharoo 7,941 Reputation points Microsoft Employee

2024-09-18T10:44:17.12+00:00

Hello @godzillaKP ,

Thank you for reaching out. I would like to confirm that following would be the application which you need to use if you would like to target Azure Portal. For more information you can also refer following article: https://video2.skills-academy.com/en-us/entra/identity/conditional-access/how-to-policy-mfa-admin-portals

I hope this helps. I hope this helps and hence would request you to please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Satish Amrutappa gokale 0 Reputation points

2024-09-18T12:02:27.91+00:00

How to get the account details where in MFA is not enforced ?

Harpreet Singh Matharoo 7,941 Reputation points Microsoft Employee

2024-09-18T13:56:58.04+00:00

@Satish Amrutappa gokale

If you are implementing MFA using per-user MFA then you should be able to get MFA enforced details from Per-User MFA blade.

If you are implementing MFA using Conditional Access then you would need to review the each MFA based policies and validate scope of the policy.

If you would like validate if the user has registered for MFA then you can review User registration details from Entra Portal >> Security >> Authentication Method >> User Registration details.

godzillaKP 46 Reputation points

2024-09-18T14:27:24.64+00:00

Have added that app, and a test user but still nothing :( when accessing Azure Portal:

Could it be related with the fact of this user test not having permissions to access anything on Azure Portal? like a subscription?

Have a similar one for Global Administrators, with that one that you have mentioned, and conditional access is being applied. The only difference is that I have a global administrator role, and test user not (and don't even have access to any subscription or anything).

Harpreet Singh Matharoo 7,941 Reputation points Microsoft Employee

2024-09-18T15:08:29.0533333+00:00

@godzillaKP the policy will apply or not would depend on the scope of the policy. Can you confirm if the user you tested with is part of the group to which you have applied the policy to??

godzillaKP 46 Reputation points

2024-09-18T15:39:00.8066667+00:00

Yes, it is:

godzillaKP 46 Reputation points

2024-09-19T08:32:41.4166667+00:00

Did here a test, with just that user as included on that CA policy, have disabled on per user MFA for that user (seems like a requirement? https://video2.skills-academy.com/en-us/entra/identity/monitoring-health/recommendation-turn-off-per-user-mfa#action-plan but still didn't had any issues with the other CA policy created by Microsoft), and have even added All apps, but still nothing. Am I missing here something?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How can I set a Conditional Policy for all Azure Portal?

1 answer

Your answer