Is there a way to temporary bypass MFA for a user?

[JoeDante77]

Hi guys, 

Our current setup is we get users to login to cisco anyconnect with their AD username and password then they get an alert to allow the connection via Microsoft Authenticator.

This is working fine however occasionally we have a situation where a user has no phone available and cannot connect to VPN.
I am wondering if there's a way to temporarily bypass using the Microsoft Authenticator app when connecting to the VPN?

[balaji.bandi]

There is no option for temporarly allow. if you see this is more and more users - You need to create a new profile and add that user in to that profile not to use MFA. (but this is permanent).

bare in mind removing MFA is secure threat, that means any one who knows that username and password can login, that is the reason MFA was introduced to secure.

[Marvin Rhoads]

For a given connection profile, this can only be done by an admin of the organization's Azure instance. They would need to go in and configure a one-time bypass for that user.

https://cloudacademy.com/course/implementing-multi-factor-authentication/configure-bypass-options/