Missing MFA for Privileged Account

Version 202608241311

Aug 24, 2026, 1:11 PM

Detection (Ignore the accounts which are privileged only because they are assigned the "Directory Synchronization Accounts" or "On Premises Directory Sync Account" role, since these Microsoft Entra Connect and Cloud Sync service accounts cannot use MFA without breaking the synchronization)
Metadata (Explain that the Microsoft Entra Connect and Cloud Sync service accounts must be excluded from the recommended Conditional Access policy, since they cannot comply with an MFA requirement)