Note that this would also I think include guest users – I need to test that! Guest users are by their very nature not on my network but I might have MFA required for them – so they need to register, but I don’t want to apply the below to them Eventually I will change this to All Users so that no-one can register security info apart from when on a trusted location. I have selected “Users and Groups” rather than “All Users” as I plan to test this out first! I have picked the group that I use for testing Conditional Access changes. I have chosen “Register Security Information On-Premises” for hereĬlick Users and Groups.

Open the Azure AD portal at and click Enterprise Applicationsįrom here click Conditional Access (this is also accessible under Azure AD > Security as well)Ĭlick Add Policy and give the policy a name.

Create the Conditional Access Policy for User Actions So, what does this look like in practice? Lets put this preview to the test. Its visible under Azure AD > Conditional Access > New/Existing Policy > Cloud Apps or Actions:

Well it looks like this has appeared in Azure AD in the last few days!! A long request within Azure AD/Office 365 has been the request to be able to register your security info from a known location or only on certain other conditions.

On prem mfa