1

Hi Folks,

I’d like to look into Conditional Access Policies within my school.
This is to enable 2FA for students but not require them to authenticate within school as phones are banned.

Research online suggests I can get a licence per user/per month for £0.42, but I would need approximately 1000 licences to cover all students.
Can I set up the policies with just one licence tied to my account, or do I need to equip all students too?

Thanks,
Joe.

5 Spice ups
2

No

Yes

Each user targeted by a Conditional Access policy must have a Microsoft Entra ID Premium P1 (formerly Azure AD Premium P1) license or higher

2 Spice ups
3

Hi Joe,
If this is Microsoft, then yes you will need a license for each user…

We did something similar in our company where users didn’t need to MFA when at the office, just be aware that if you are subject to any compliance regulations such as NIST 800-171 then this isn’t sufficient to meet some of the access control policies. We just learned that the hardway during a CMMC GAP analysis.

Cheers

1 Spice up
4

Are there any methods that wouldn’t be as costly?
Quick maths suggest an additional annual cost of £5k which I know full well won’t be authorised.

1 Spice up
5

Only license those who actually plan to access 365 services from outside.

Internally, one policy setup allows trusted IPs for no MFA, its outside where the cost comes in.

Do all 1000 actually need to login when outside of campus?

Could students be offered outside access for £5 a year, to offset some costs?

Is this actually a ‘school’ or a college, though.

£5040 isn’t a massive cost, look at what else it would allow and make the most of it.

2 Spice ups
6

Which license(s) do you currently use? If you have A3 or A5, then Entra Premium is included (P1 in A3, and P2 in A5).

2 Spice ups
7

This! Assign only to the staff. Students probably don’t need access off-site unless we went back into lockdown for some reason…but agreed also that the cost isn’t really that bad considering the level of access it grants to other MS products/features. Sell it based on the upgrade in features, your leadership shouldn’t pass on that angle.

1 Spice up
8

With an Education agreement with MS, we license all employees and get 40 “free” licenses for students for each employee. Here’s a chart of Student Use Benefits:

4 Spice ups
9

We currently use E3 for Faculty and Students licences.

A very good point regarding “who needs it” short answer, I don’t know.
But I reckon if anything, the sixth form students would benefit from such access.

We are a secondary school with sixth form and regarding costs, we are still using Optiplex 3010s :slight_smile:
Thank you Whopper for the link, I’ll give that a read as yes students get access to loads of stuff I could never have dreamed of as a kid.

Thank you all so far for the fantastic advice and support.

2 Spice ups