*Needs Updated - Manual Enrollment Using Azure AD

Needs Updated. Not using these groups anymore. 

Delegated Azure AD Groups

50096173-MFA-Delegated-ITEUE_CSC_MFA_Required : requires MFA (no grace period, yet)

50096173-MFA-Delegated-ITEUE_CSC_MFA_Exempt : exempts user from MFA requirement

50096173-MFA-Require_After_Grace_Period : Nags for device registration, but then forces DEVICE registration after 14 days (does not enable MFA)

1. Open Azure AD Portal
   1. Navigate to portal.azure.com in a web browser
   2. Login with your BoilerAD OUAdmin account
      NOTE: On the signin, use your ouadmin username & @purdue.edu Ex. djrouadmin@purdue.edu
   3. Click View under Manage Azure Active Directory
      
      
      
      
2. Find AD groups
   1. Select “Manage > Groups”
      
      
      
      
   2. Search for “50096173-MFA-Delegated-ITEUE_CSC” and select the appropriate group name (“MFA_Required” or “MFA_Exempt”)
      
      
      
      
      
      
   3. Select “Manage > Members”
      
      
      
      
   4. Select “Add members”.  Search for the account to add.  Find the account and choose “Select”
      
      
      

NOTE:  Once the account is added to the group, the change will take effect immediately for new sessions.  Existing sessions will prompt once the Azure token refreshes.