https://community.cisco.com/t5/network-security/is-there-a-way-to-temporary-bypass-mfa-for-a-user/m-p/4713678#M1094662 <P>Hi guys,&nbsp;<BR /><BR />Our current setup is we get users to login to cisco anyconnect with their AD username and password then they get an alert to allow the connection via Microsoft Authenticator.<BR /><BR />This is working fine however occasionally we have a situation where a user has no phone available and cannot connect to VPN.<BR />I am wondering if there's a way to temporarily bypass using the Microsoft Authenticator app when connecting to the VPN?<BR /><BR /></P> Mon, 31 Oct 2022 12:34:45 GMT JoeDante77 2022-10-31T12:34:45Z https://community.cisco.com/t5/network-security/is-there-a-way-to-temporary-bypass-mfa-for-a-user/m-p/4713678#M1094662 <P>Hi guys,&nbsp;<BR /><BR />Our current setup is we get users to login to cisco anyconnect with their AD username and password then they get an alert to allow the connection via Microsoft Authenticator.<BR /><BR />This is working fine however occasionally we have a situation where a user has no phone available and cannot connect to VPN.<BR />I am wondering if there's a way to temporarily bypass using the Microsoft Authenticator app when connecting to the VPN?<BR /><BR /></P> Mon, 31 Oct 2022 12:34:45 GMT https://community.cisco.com/t5/network-security/is-there-a-way-to-temporary-bypass-mfa-for-a-user/m-p/4713678#M1094662 JoeDante77 2022-10-31T12:34:45Z https://community.cisco.com/t5/network-security/is-there-a-way-to-temporary-bypass-mfa-for-a-user/m-p/4713681#M1094665 <P>There is no option for temporarly allow. if you see this is more and more users - You need to create a new profile and add that user in to that profile not to use MFA. (but this is permanent).</P> <P>bare in mind removing MFA is secure threat, that means any one who knows that username and password can login, that is the reason MFA was introduced to secure.</P> <P>&nbsp;</P> Mon, 31 Oct 2022 12:42:40 GMT https://community.cisco.com/t5/network-security/is-there-a-way-to-temporary-bypass-mfa-for-a-user/m-p/4713681#M1094665 balaji.bandi 2022-10-31T12:42:40Z https://community.cisco.com/t5/network-security/is-there-a-way-to-temporary-bypass-mfa-for-a-user/m-p/4713722#M1094667 <P>For a given connection profile, this can only be done by an admin of the organization's Azure instance. They would need to go in and configure a one-time bypass for that user.</P> <P><A href="https://cloudacademy.com/course/implementing-multi-factor-authentication/configure-bypass-options/" target="_blank">https://cloudacademy.com/course/implementing-multi-factor-authentication/configure-bypass-options/</A></P> Mon, 31 Oct 2022 14:23:49 GMT https://community.cisco.com/t5/network-security/is-there-a-way-to-temporary-bypass-mfa-for-a-user/m-p/4713722#M1094667 Marvin Rhoads 2022-10-31T14:23:49Z