Switch from per-user MFA to MFA with Microsoft Entra Conditional Access

Setting up Multi-Factor Authentication (MFA) per user significantly enhances the security of a Microsoft tenant and is now the standard practice for every administrator. With per-user MFA, a Multi-Factor Authentication is required from the user during each sign-in. However, this can lead to frustration among legitimate users whose workflows are…

02/07/2024 Article Bloggers Oliver Müller

Share:

You may be interested in

Securing Microsoft 365 Apps with Microsoft Entra Global Secure Access
Strengthening secure access to Microsoft 365: Microsoft Entra Global Secure Access provides encrypted access to Microsoft 365 services such as Exchange Online and SharePoint Online through the Microsoft traffic profile.…
06/05/2025
Protect Security Info Registration with Microsoft Entra Conditional Access and Microsoft Entra ID Protection
Registration of security information such as the Microsoft Authenticator app, FIDO2 security keys or OATH tokens is a critical component of modern identity security. To protect this sensitive process, Microsoft…
02/09/2025
Secure Emergency Access: Create and Manage Microsoft Entra Emergency Accounts with YubiKey (FIDO2)
A Microsoft Entra Emergency Account (Break Glass Account) is a highly privileged account for emergency access to Azure resources in critical situations when traditional access paths are not available. For…
04/12/2023
Microsoft Entra ID Protection: Protect Identities, Detect Risks and Mitigate Threats
In today’s digital world, protecting our identity is crucial. The threats we face online are becoming increasingly sophisticated and refined, making the security of our identity a central challenge. Microsoft…
02/12/2024
Microsoft Entra Privileged Identity Management (PIM) and FIDO2: Increasing the security of privileged roles
Privileged roles and permissions in Microsoft Entra ID allow you to manage all aspects of Microsoft Azure and Microsoft 365. To make phishing and other attacks more difficult, a secure…
06/02/2024
Enhance Token Security with Microsoft Entra and Microsoft Intune
When an attacker steals a user’s token after a successful login, they gain the ability to impersonate the user and access protected resources without requiring a re-login. This method is…
06/01/2025
SMB over QUIC and Azure Server: empowering secure and lightning fast file sharing
SMB over QUIC is a network protocol used by Windows. It allows secure, shared use of resources such as files on the network. To use SMB (Server Message Block) without…
16/09/2023
Microsoft Entra Private Access: secure access to internal resources and cloud services without VPN
Microsoft Entra Private Access gives users secure access to the internal network and cloud-based services from anywhere in the world. Setting up and maintaining (complex) VPN connections is now a…
08/11/2023
Microsoft Entra ID: Automatically roll over Kerberos decryption key
The regular roll over of the Kerberos decryption key is crucial to ensure the security and integrity of seamless Single Sign-On (SSO) in hybrid IT environments. Microsoft recommends rolling over…
06/08/2024
Microsoft Entra ID: Admin Consent Workflow for Secure Application Permissions
The Admin Consent Workflow in Microsoft Entra ID is a feature designed to manage user consent for enterprise application permissions. It allows administrators to review, approve, or deny permission requests…
02/06/2025
Azure Arc and Windows Server: The perfect pair for the hybrid cloud
Last Updated on 12. August 2023 Microsoft Azure Arc is a solution that enables resources to be centrally managed and monitored across multiple environments. Azure Arc extends the management capabilities…
29/07/2023
Temporary Access Pass in Microsoft Entra: what it is and how to use it
A Temporary Access Pass (TAP) is a time-limited passcode that can be configured for single or multiple use. The Temporary Access Pass (TAP) allows the user to securely sign in…
05/03/2024