Skip MFA Registration

Question

We are using a single account for demo purposes across different teams, so we are unable to enable MFA for that user. How can we skip the MFA registration for this particular user?"

Let me know if you need further adjustments!

Answer 1

Exclude if from any MFA Conditional Access Policy:

https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-all-users-mfa-strength#user-exclusions

Exclude from any MFA registration policy:

https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-mfa-policy#policy-configuration

Do not enable for per user MFA:

https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-userstates#view-the-status-for-a-user

If you are using Security Defaults, then you can not exclude the account:

https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults

Answer 2

There are 3 ways to enable MFA. Which method are you using for MFA configuration?

1. Per-user MFA (legacy and not recommended, but you can easily disable MFA for a single account)
2. Security defaults (You can't exclude a single account)
3. Conditional Access (If you have Entra P1 or P2 or Business Premium, you can exclude MFA for a single user)

You can check this guide to disable MFA for a single account through Conditional Access policy: https://o365reports.com/2023/08/08/disable-mfa-for-a-single-user-using-conditional-access-policy-in-azure-ad/