25md1 (25md1) asked a question.
Can I exclude a particular user from being forced to perform MFA?
We have a user that has MFA push on their iphone. For O365 mail this user uses iphone mail. This user also is delegate to a shared calendar that we normally "log into" as another account on the device. In the meantime the user replaced his device and now when trying to add the shared calendar account to the iphone, he is redirected to Okta login. Since his personal office 365 account is logged into Okta already, we get an account mismatch error. Can I exclude the shared calendar from being forced to enter an MFA? Last resort is to switch the shared account's login to the xxxxx.onmicrosoft.com login which doesn't redirect to Okta. Thanks!!
Hi @25md1 (25md1),
Thank you for posting on the Okta community page!
From the Okta side you could create/update the Sign On policies in order to exempt this specific user from being prompted for MFA when authenticating. I have provided below a documentation that contains more information about App Sing On policies:
------------------------------------------------------------------------------------------------------------------------------------------------
The October issue of the Okta Community is here and packed with tips on certification, how to earn badges, and new releases. Let us help you stay connected.