Share this article

Improve this guide

How to Exclude Users From MFA in Azure: 4 Tested Methods

MFA in Azure provides an excellent layer of security

3 min. read

Published onNovember 13, 2023

published onNovember 13, 2023

Share this article

Improve this guide

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Key notes

Sometimes, you need to exclude one or more users from MFA in Azure because, for some reason, they can’t use multi-factor authentication.

Our WR software experts have tested a few methods to exclude users from the conditional access policies and outlined them below.

How do I disable MFA for a specific user in Azure?

How do I disable MFA for a specific user in Azure?

1. Disable MFA from Azure Active Directory

To confirm that you removed the multi-factor authentication for that user, try to log into Azure with the user credentials and check if there is any request for an MFA login.

2. Create an exclusion group and policy

2.1 Create the exclusion group in Azure

2.2 Create an MFA exclusion policy for the group

Now, the users from the group you have selected should have been excluded from multi-factor authentication when logging in.

3. Use the What If conditional tool in Azure

The What If tool allows you to check what policies are applied to each user to see if there are any problems or conflicts. This will help you see if the multi-factor policy or other security policies are enforced.

4. Disable Per User MFA in PowerShell

How do I know if a user is registered for MFA?

You can check the Azure MFA policy in the Security menu, but using the What If tool fromSolution 3above is a lot easier.

Note that in order to have access to users and the security defaults, you will need an administrative account.

So, now you know how to exclude a user from Azure Multi-Factor Authentication (MFA) and restore the user access to the classic username and password method.

You might also be interested in learning how toapply MFA on Windows 11,or how toset up multi-factor authentication on RDP.

If you have any other questions or tested solutions, don’t hesitate to use the comments section below and let us know about them.

More about the topics:Microsoft Azure

Claudiu Andone

Windows Toubleshooting Expert

Oldtimer in the tech and science press, Claudiu is focused on whatever comes new from Microsoft.

His abrupt interest in computers started when he saw the first Home Computer as a kid. However, his passion for Windows and everything related became obvious when he became a sys admin in a computer science high school.

With 14 years of experience in writing about everything there is to know about science and technology, Claudiu also likes rock music, chilling in the garden, and Star Wars. May the force be with you, always!

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Δ

Claudiu Andone

Windows Toubleshooting Expert

Oldtimer in the tech and science press, with 14 years of experience in writing on everything there is to know about science, technology, and Microsoft