Require MFA authentication strength
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 243c8fb · +5 −2 lines · also on GitHub
⋯ 4 unchanged lines
55
ms.service: entra-id
66
ms.subservice: conditional-access
77
ms.topic: how-to
8
−ms.date: 02/03/2025
8
+ms.date: 02/24/2025
99
1010
ms.author: joflore
1111
author: MicrosoftGuyJFlo
⋯ 36 unchanged lines
4848
1. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.
4949
1. Under **Assignments**, select **Users or workload identities**.
5050
1. Under **Include**, select **All users**
51
− 1. Under **Exclude** select **Users and groups** and choose your organization's emergency access or break-glass accounts.
51
+ 1. Under **Exclude**:
52
+ 1. Select **Users and groups**
53
+ 1. Choose your organization's emergency access or break-glass accounts.
54
+ 1. If you use hybrid identity solutions like Microsoft Entra Connect or Microsoft Entra Connect Cloud Sync, select **Directory roles**, then select **Directory Synchronization Accounts**
5255
1. You might choose to exclude your guest users if you're targeting them with a [guest user specific policy](policy-guests-mfa-strength.md).
5356
1. Under **Target resources** > **Resources (formerly cloud apps)** > **Include**, select **All resources (formerly 'All cloud apps')**.
5457
⋯ 28 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:50 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.