The URL Filter allows you to enforce or skip MFA based on the URL of the resource. This feature is commonly used to exempt MFA from some special service URLs. For example,

  • the MRS Proxy endpoint in the EWS application node for remote moves, i.e. /ews/mrsproxy.svc
  • the Outlook Template endpoint in the OWA application node, i.e. /owa/.../prem...


To edit the URL Filter, click the "URL Filter" button


To add a URL filter, click the "Add" button


You can enter a simple text pattern or a regular expression. For example

Application NodePurposePattern
EWS MRS Proxy endpoint MRSProxy.svc

OWAOutlook Template endpoint/owa/.*/prem/.*/ext/def/.*




  • No labels