Re: Microsoft MFA Opt-In

["Kurtz, Eric" <kurtz () SUSQU EDU>]

You can try this approach.

Create a public 0365 group, then use that group for MFA registration (Azure Portal>Azure AD Identity Protection>MFA 
Registration) or however you are assigning MFA.
For end users, they can join by
                Outlook> Browser Groups > Select new group > click join


Eric Kurtz
Interim Director of Enterprise and Network Infrastructure
Senior Systems Engineer
Office of Information Technology
Susquehanna University
514 University Avenue
Selinsgrove, PA 17870-1164
kurtz () susqu edu<mailto:kurtz () susqu edu>


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Pardonek, Jim
Sent: Wednesday, May 29, 2019 1:52 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Microsoft MFA Opt-In

I'm looking for some advice on the best way to handle an opt-in period for Microsoft MFA.  It looks to me that the only 
way would be to add folks to a particular group as they request to opt-in.  It doesn't seem workable if several hundred 
students or staff request to opt-in at once.  Hoping that someone might have a better way.

Jim

James Pardonek, MS, CISSP, CEH, GSNA
Information Security Officer
Loyola University Chicago
1032 W. Sheridan Road | Chicago, IL  60660

*: (773) 508-6086

Loyola University Chicago will never ask you for your username or password.
For the lastest information security news at Loyola, please follow us online,
Twitter: @LUCUISO
Facebook: 
https://www.facebook.com/lucuiso/<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Flucuiso%2F&data=02%7C01%7Ckurtz%40SUSQU.EDU%7C4dec4d114d2747a8104608d6e45e4c95%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C636947491023700193&sdata=Hf9Q3S%2B4tHp%2FSw5oPeXQp0kZyCNeaf94tZsNOlxZd6A%3D&reserved=0>
Our Blog http://blogs.luc.edu/uiso/