de-activate mfa on user level (w/o removing mfa devices or implementing new flow)

[mxlb-dev]

Hi,

what is the most elegant way to de-activate mfa for specific users? Afaik there are two options:
a) authentication-flow without mfa step
b) delete mfa devices on user-level

Are there other ways to implement this? Preferably I would like to pause/disable mfa for a subset of users.

Thanks!

[bahmanjafari]

I would like to clarify that we are using a dedicated service account for LDAP synchronization. For this specific account, we would like to disable MFA, while keeping MFA enabled for all other users

[scraejtp]

You can bind a policy to the MFA stage to skip it in your authentication flow. I use a policy where if I am on my local network it skips the MFA stage.

[ZeroVEVO]

Hy there! Can you give me more detail on how you implemented the policy for local network?