Simplifying Elementary Student sign in with Shared & 1-1 iPads with MS 365

[ShawnNeal]

We are using MS365 as our identity provider and collaboration/productivity platform with Jamf School. Our students will have access to Shared or 1-1 iPads on the Elementary ages.

Does anyone have any suggestions on how we can simplify student sign-in so students can sign in securely without MFA/hardware key on Jamf School enrolled iPads?

[AJPinto]

It's really up to your Entra Authentication configurations and how you configure the Comp Portal. You either require MFA or you don't, if you don't the login is not really secure. 

[Lasse]

You could consider setting up a Entra ID authentication and making an MFA exception for the Azure Enterprise app for Jamf School enrollment. This should then only affect the enrollment, but ask for MFA for Outlook or other MS365 resources after enrollment. If you're looking for lesser MFA all around for those users, then you might have to go further into your Entra ID requirements for the different student groups.