

* The code changes every 30 seconds on the Authenticator app. Type this into the prompt from your web browser and select Verify. Go back to phone and read code from the Authenticator app Select the radial button beside Use verification code and click next When you have the Microsoft Authenticator app configured, you will be able to verify via App Code. To use this option you must first download the Microsoft Authenticator App, please follow Download & Install Authenticator App instructions. Option 2 - Verification Via Code Through Authenticator App Click close. You will be brought directly to your mailbox. Go back to your phone and from the Authenticator App and choose Approve Select the radial button beside Recieve notifications for verification and click next When you have the Microsoft Authenticator app configured, you will be able to verify via Push Notification.


Select Create to save and create your policy.Īfter you apply and deploy this policy, users will see a one-time MFA prompt when they enroll their device.Option 1 - Verification Via Push Notification Through Authenticator App Select Sign-in frequency and choose Every time.Under For multiple controls, select Require all the selected controls.Select Require multifactor authentication and Require device to be marked as compliant.Under Conditions you don't need to configure any settings for MFA. With this option, MFA is required during device enrollment and appears as a one-time MFA prompt on the Company Portal sign-in page. The MFA prompts appear on the Company Portal sign-in page. With this option, MFA is required during enrollment and each time the user signs into the Company Portal app or website. The following table describes the difference between the Microsoft Intune option and Microsoft Intune Enrollment option. Use the search bar in the app picker to find the app.įor Apple automated device enrollments using Setup Assistant with modern authentication, you have two options to choose from. Choose Microsoft Intune Enrollment > Select to add the app.Select the next category, Cloud apps or actions. To exclude users or groups from the policy, select the Exclude tab and add those users or groups.

