Select User Actions in the slider and check the option for Register Security Information (Preview) Select Cloud Apps or Actions (this was recently renamed to support this functionality we are describing here) Note that this would also I think include guest users – I need to test that! Guest users are by their very nature not on my network but I might have MFA required for them – so they need to register, but I don’t want to apply the below to them Eventually I will change this to All Users so that no-one can register security info apart from when on a trusted location. I have selected “Users and Groups” rather than “All Users” as I plan to test this out first! I have picked the group that I use for testing Conditional Access changes.

I have chosen “Register Security Information On-Premises” for hereĬlick Users and Groups.

Open the Azure AD portal at and click Enterprise Applicationsįrom here click Conditional Access (this is also accessible under Azure AD > Security as well)Ĭlick Add Policy and give the policy a name. Create the Conditional Access Policy for User Actions So, what does this look like in practice? Lets put this preview to the test. Its visible under Azure AD > Conditional Access > New/Existing Policy > Cloud Apps or Actions: Well it looks like this has appeared in Azure AD in the last few days!! A long request within Azure AD/Office 365 has been the request to be able to register your security info from a known location or only on certain other conditions.

Active directory mfa on premise