Hi all,

I am planning to enable MFA for guest accounts and external identities using Conditional Access in MS Entra. I am however wondering how I can select what Authentication methods can they use – or what would be the default behaviour.

Currently, I am still using legacy MFA for internal users. I will migrate MFA to MS Entra later this year however, not sure how this is working when enabling MFA for external users.

As I do use legacy MFA, my setting in ” Authentication methods > Policies” have MS Authenticator set to NO.

Now, do I need to switch MS Authenticator to YES if I want guests to use that app? And if I enable it, how do I assign it to External identities only? I do not see that kind of option there at all… I can assign it to all, for example, but I am not yet ready to migrate internal users as well…

Would be happy to get some clarification on this.

Thank you

​Hi all, I am planning to enable MFA for guest accounts and external identities using Conditional Access in MS Entra. I am however wondering how I can select what Authentication methods can they use – or what would be the default behaviour. Currently, I am still using legacy MFA for internal users. I will migrate MFA to MS Entra later this year however, not sure how this is working when enabling MFA for external users.As I do use legacy MFA, my setting in ” Authentication methods > Policies” have MS Authenticator set to NO. Now, do I need to switch MS Authenticator to YES if I want guests to use that app? And if I enable it, how do I assign it to External identities only? I do not see that kind of option there at all… I can assign it to all, for example, but I am not yet ready to migrate internal users as well… Would be happy to get some clarification on this. Thank you  Read More

​