Hey everyone! I'm looking for a way to turn off MFA for just one specific user without affecting the security measures we have in place for everyone else. Is there a method to do this?
2 Answers
You can manage this with conditional access. If that user doesn't want to use the MFA app, consider giving them a hardware token instead. This way, they won't have to deal with the app, but you still maintain security for others.
If your system uses conditional access policies, you can create an excluded group and add that user to it. However, if you're sticking with the default settings, it might not be possible.

So if I go with the excluded group approach, I have to be careful about my settings, right?