none
Exclude ActiveSync Traffic from MFA in ADFS 3.0 RRS feed

  • Question

  • We have an ADFS 3.0 solution, federated with O365, working with MFA which only requires MFA when users are on the Extranet. This works fine until the users phones try to connect to their mailboxes and then prompt for an MFA password.

    I understand that we can change the claim rule in ADFS to exclude ActiveSync traffic but just wanted to confirm the correct syntax for the command and if the exclusion can be removed if it causes unwanted "side effects"?

    I've found the required command at the following URL:

    https://newsignature.com/articles/bypassing-multi-factor-authentication-using-ad-fs-claims-rule/

    Cheers for now

    Russell

     
    Wednesday, September 28, 2016 11:50 AM

All replies

  • Hi,

    Thanks for your post.

    It looks like the query is more related to the ADFS feature part, which our forum doesn’t focus on. To get dedicated support, I suggest you open a new thread with the query in our ADFS Forum, Your understanding is appreciated.

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=ADFS&filter=alltypes&sort=lastpostdesc

    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us.  Thank you for your understanding.

    I have also found one related article, here is the link for your reference:

    Limiting Access to Office 365 Services Based on the Location of the Client

    https://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, September 29, 2016 3:03 AM
    Moderator
  • Thanks, I'll repost in the other forum.

    Cheers for now

    Russell

    Thursday, September 29, 2016 9:13 AM
  • Hi Russell,

    Hope you could get a solution there.

    If there is anything else we can do for you, please feel free to post in the forum.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, September 30, 2016 7:01 AM
    Moderator