# Microsoft 365 / Entra ID

## Tenant Info
- Tenant ID: 7dfa3ce8-c496-4b51-ab8d-bd3dcd78b584
- Primary Domain: dataforth.com
- Admin Portal: https://admin.microsoft.com

## Entra ID (Azure AD)
- Hybrid Joined: Yes — Azure AD Connect
- Sync Account: MSOL_664594195fe2
- Syncs From: OU=SyncedUsers
- Does NOT Sync: OU=ServiceAccounts
- Password Hash Sync: Unknown

## Conditional Access Policies
Deployed 2026-03-27, **report-only until April 4, 2026**:

| Policy | Details |
|--------|---------|
| Require MFA | Skip from office IP 67.206.163.122 |
| Block foreign sign-ins | US only, MFA-Travel-Bypass group for exceptions |
| Block legacy authentication | Blocks all legacy auth protocols |

## MFA Status
- MFA-Ready: 19/38 users
- Need to Register: 19 users
- **Enforcement Date: April 4, 2026**

## Notes
- MFA-Travel-Bypass is likely an Entra ID group (not on-prem AD)
- No custom security groups found in on-prem AD