How to configure an MFA-enabled service account

If your Microsoft 365 service account is MFA-enabled, you need to use either the Conditional Access or Trusted IP feature in Microsoft 365 to bypass MFA. Once you have configured one of these features, proceed to configure the service account in Exchange Reporter Plus.

Steps to configure Trusted IPs

1. Log in to portal.azure.com using your Global Administrator credentials.
2. Click Azure Active Directory under Azure services.
3. Choose Security from the left pane.
4. Click MFA under the Manage category in the left pane.
5. Choose the Additional cloud-based MFA settings option.
6. In the new window that opens, go to the trusted ips section.
7. Select the Skip multi-factor authentication for requests from federated users on my intranet option.
8. In the text box, enter the IP address of the machine in which you have installed Exchange Reporter Plus.
9. Click Save.

Steps to configure Conditional Access

In this section, you will learn how to create a policy to exclude the configured Microsoft 365 service account from MFA so that it does not show an error during tenant configuration.

1. Log in to portal.azure.com using your Global Administrator credentials.
2. Click Azure Active Directory under Azure services.
3. Choose Security from the left pane.
4. Click Conditional Access under the Protect category in the left pane.
5. Click New Policy.
6. The drop-down list contains options to either Create new policy or Create new policy from templates (preview). Click Create new policy to continue.
7. Provide a name for the policy.
8. Under Assignments, choose Users or workload identities.
9. Click the Users and groups option.
10. Select the Exclude tab.
11. Select the Users and groups check box, and choose the account(s) for whom MFA should not be enforced.
12. Click Select.
13. Under the Access controls section, click Grant.
14. Select the Grant access radio button and the Require multi-factor authentication check box.
15. Click Select.
16. Click Create.