We would like to use Microsoft MFA but do not want this to affect our Airwatch environment. We are full AW SaaS. We are in an AD Hybrid environment, On-Prem AD and full O365 all mail in O365. We are using Modern Authentication in Airwatch. We want to turn on MFA and we would exclude all MFA for all enrolled Mobile devices. We are using the Boxer app, and we have Active Sync turned off in Exchange Online, letting Airwatch whitelist and manage the device.
So, once we turn this on, will it work ? is there anything needed to be done ? Do we need to simply get a list of all IP's that Airwatch uses and build a conditional access list to exclude from MFA so it doesn't affect the phones ?
