Microsoft Entra ID

Migrate Custom Controls External Mfa

In brief

- **Conditional Access**: The new policy evaluated and granted access

Documentation change

  • Conditional Access: The new policy evaluated and granted access
  • MFA requirement satisfied by: External authentication method (not custom control)

Validate downstream integrations

If applicable, verify that these scenarios work correctly with external MFA:

  • Self-Service Password Reset (SSPR): User can reset password using external MFA.
  • PIM role activation: User can activate privileged roles with external MFA.
  • Risk-based policies: Sign-in risk and user risk policies correctly interact with external MFA.
  • Intune device enrollment: Device registration completes with external MFA.

Full rollout