Configuring Azure AD Conditional Access Policies for Microsoft 365 connection account

Summary: Microsoft 365 connection account should be excluded from conditional access policies, including Baseline policies and custom policies, and from per-user MFA policies.

Applies to: Cayosoft Administrator 6.4.0 or later

ID: KB20200305-1

Overview

Microsoft 365 connection account should be excluded from conditional access policies, including Baseline policies and custom policies, and from per-user MFA policies.

How to check

1. Navigate to https://login.microsoftonline.com
2. Login using Microsoft 365 connection account 
3. Open Microsoft 365 Admin Center  
4. Navigate to Admin centers > Azure Active Directories 
5. In the Azure portal, on the left navbar, click Azure Active Directory
6. On the Azure Active Directory page, in the Security section, click Conditional access
7. Exclude Microsoft 365 connection account from all access policies, including Baseline and custom policies.
8. Save changes
   
   
9. In Azure AD select Users and click Per-user MFA.
10. Check that MFA is disabled for Microsoft 365 connection account. 
    

Related Articles

KB20180503-1 Troubleshooting connection to Office 365