This area is the same as the conditional access area available in Azure AD.

Configure Intune to require multifactor authentication at device enrollmentĬomplete these steps to enable multi-factor authentication during Microsoft Intune enrollment.ĭon't configure Device based access rules for Microsoft Intune enrollment. To implement this policy, you must assign Azure Active Directory Premium P1 or later to users.

Something you are, such as a fingerprint.

Something you have that can't be duplicated, such as a trusted device or phone.

Something you know, such as a password or PIN.

MFA requires them to authenticate using two or more of these verification methods: If you require MFA, employees and students wanting to enroll devices must first authenticate with a second device and two forms of credentials. You can use Intune together with Azure Active Directory (Azure AD) conditional access policies to require multifactor authentication (MFA) during device enrollment. Require multifactor authentication for Intune device enrollments

Intune mfa