Comments on: Azure AD System-Preferred Authentication Policy https://practical365.com/azure-ad-system-preferred-authentication/ Practical Office 365 News, Tips, and Tutorials Fri, 26 Jul 2024 15:54:51 +0000 hourly 1 https://wordpress.org/?v=6.6.1 By: <div class="apbct-real-user-wrapper"> <div class="apbct-real-user-author-name">Tony Redmond</div> <div class="apbct-real-user-badge" onmouseover=" let popup = document.getElementById('apbct_trp_comment_id_257838'); popup.style.display = 'inline-flex'; "> <div class="apbct-real-user-popup" id="apbct_trp_comment_id_257838"> <div class="apbct-real-user-title"> <p class="apbct-real-user-popup-header">The Real Person!</p> <p class="apbct-real-user-popup-text">Author <b>Tony Redmond</b> acts as a real person and passed all tests against spambots. Anti-Spam by CleanTalk.</p> </div> </div> </div> </div> https://practical365.com/azure-ad-system-preferred-authentication/#comment-257838 Wed, 29 Mar 2023 11:40:00 +0000 https://practical365.com/?p=58145#comment-257838 In reply to Andreas Rosen.

Look at the screen shot I added (today) to the post. It shows how to select the group for the policy.

]]> By: Andreas Rosen https://practical365.com/azure-ad-system-preferred-authentication/#comment-257834 Wed, 29 Mar 2023 10:35:25 +0000 https://practical365.com/?p=58145#comment-257834 In reply to Tony Redmond.

… You can define a different security or Microsoft 365 group if you want to limit the policy to specific users.
Where can you do that? That sound like an possibe exit.

]]> By: <div class="apbct-real-user-wrapper"> <div class="apbct-real-user-author-name">Tony Redmond</div> <div class="apbct-real-user-badge" onmouseover=" let popup = document.getElementById('apbct_trp_comment_id_257828'); popup.style.display = 'inline-flex'; "> <div class="apbct-real-user-popup" id="apbct_trp_comment_id_257828"> <div class="apbct-real-user-title"> <p class="apbct-real-user-popup-header">The Real Person!</p> <p class="apbct-real-user-popup-text">Author <b>Tony Redmond</b> acts as a real person and passed all tests against spambots. Anti-Spam by CleanTalk.</p> </div> </div> </div> </div> https://practical365.com/azure-ad-system-preferred-authentication/#comment-257828 Wed, 29 Mar 2023 09:04:37 +0000 https://practical365.com/?p=58145#comment-257828 In reply to Aaron.

Thanks for letting me know. UI appearing without warning tends to happen when something is in a preview…

]]> By: Tony Redmond https://practical365.com/azure-ad-system-preferred-authentication/#comment-257827 Wed, 29 Mar 2023 09:01:32 +0000 https://practical365.com/?p=58145#comment-257827 In reply to Andreas Rosen.

I don’t. Have you asked Microsoft? They are likely the only one that can help here as I have no insight into what’s happening on your tenant. Microsoft support can sign into your tenant and check things out for you.

]]> By: Andreas Rosen https://practical365.com/azure-ad-system-preferred-authentication/#comment-257815 Wed, 29 Mar 2023 06:50:58 +0000 https://practical365.com/?p=58145#comment-257815 In reply to Andreas Rosen.

In my tenant it was forced to set it or it will be activated automatic in 13 Days. That does not sound like a Preview.

]]> By: Andreas Rosen https://practical365.com/azure-ad-system-preferred-authentication/#comment-257812 Wed, 29 Mar 2023 06:33:06 +0000 https://practical365.com/?p=58145#comment-257812 Hi Tony,
We use oAuth with a technical User to talk to EWS API. This user was excluded from MFA. After activating the new settings. That exclude is now ignored. As it is used server to server any MFA will Break the integration. Do you see a way to solve that with the Azure AD free license?

]]> By: Aaron https://practical365.com/azure-ad-system-preferred-authentication/#comment-257810 Wed, 29 Mar 2023 06:20:36 +0000 https://practical365.com/?p=58145#comment-257810 I can see in my tenant there is now a menu to configure this setting, under “Authentication Policies > Settings”.

Here we can find “Report suspicious activity (Preview)” and “System-preferred multifactor authentication (Preview)”.

]]> By: Mike https://practical365.com/azure-ad-system-preferred-authentication/#comment-255938 Tue, 07 Mar 2023 16:46:25 +0000 https://practical365.com/?p=58145#comment-255938 In reply to Tony Redmond.

Thank you, Tony. Love your content.

]]> By: Tony Redmond https://practical365.com/azure-ad-system-preferred-authentication/#comment-255937 Tue, 07 Mar 2023 16:20:01 +0000 https://practical365.com/?p=58145#comment-255937 In reply to Mike.

There are no extra licenses required.

]]> By: Mike https://practical365.com/azure-ad-system-preferred-authentication/#comment-255936 Tue, 07 Mar 2023 16:18:16 +0000 https://practical365.com/?p=58145#comment-255936 Does this require a certain level of licensing or is it open for every tenant?

]]>