Entra MFA exception

Note

MFA exception is marked as an experimental feature. Experimental features might be unstable, unreliable, or subject to removal in future updates.

Since Multi-Factor Authentication (MFA) requires students to use their phones during exams, an exception to the MFA policy is often requested by education departments.

If you enforce MFA in student accounts and want to make this exception, the following changes are required:

• Exclude the App Registration of Schoolyear AVD from MFA enforcement. You can find the ID of this App Registration in the Infrastructure tab of the AVD add-on.
• Exclude the public IP reserved for all outgoing traffic from the AVD host pools from MFA enforcement.

These exceptions need to be configured in your Conditional Access Policy in Entra.