You need to configure the environment

You are the Office 365 administrator for your company. The company uses Active Directory
Federation Services (AD FS) to provide single sign-on to cloud-based services. You enable multifactor authentication.
Users must NOT be required to use multi-factor authentication when they sign in from the
company’s main office location. However, users must be required to verify their identity with a
password and token when they access resources from remote locations.
You need to configure the environment.
What should you do?

You are the Office 365 administrator for your company. The company uses Active Directory
Federation Services (AD FS) to provide single sign-on to cloud-based services. You enable multifactor authentication.
Users must NOT be required to use multi-factor authentication when they sign in from the
company’s main office location. However, users must be required to verify their identity with a
password and token when they access resources from remote locations.
You need to configure the environment.
What should you do?

A.
Disable AD FS multi-factor authentication.

B.
Configure an IP blacklist for the main office location.

C.
Disable the AD FS proxy.

D.
Configure an IP whitelist for the main office location.



Leave a Reply 2

Your email address will not be published. Required fields are marked *


Justin Thompson

Justin Thompson

D

https://msdn.microsoft.com/en-us/library/azure/dn807156.aspx

The Trusted IPs allows users to bypass Azure Multi-Factor Authentication for website requests originating from specific IP addresses or subnets. For example, you may want to exempt users from Azure Multi-Factor Authentication while logging in from the office. For this, you would specify the office subnet as an Trusted IPs entry. To configure Trusted IPs use the following procedure: