The MFA Policy controls whether MFA is enabled or not in the following 3 scenarios:

It also controls the frequency of the MFA requirement.

The Computer Login MFA solution provides a highly flexible and granular policy control system, enabling you to define MFA policies across multiple levels.

You can set the MFA Policy on the following levels:

  1. System Policy
    1. Online
    2. Offline
  2. Domain Policy
    1. Local
    2. Entra ID
      1. Online
      2. Offline
    3. On-Prem AD
      1. Online
      2. Offline

In total, there are 7 scenarios where you can define the MFA Policy. Namely

ScenarioPathComment
1.aSystem Policy\Online
1.bSystem Policy\Offline
2.aDomain Policy\Local\Online
2.b.iDomain Policy\Entra ID\Online
2.b.iiDomain Policy\Entra ID\Offline
2.c.iDomain Policy\On-Prem AD\Online
2.c.iiDomain Policy\On-Prem AD\Offline