Use Cases
Consider a technology startup with 85 employees working across an office, their homes, and shared workspaces.
The company relies on cloud applications for most day-to-day work. Employees regularly move between trusted and remote environments, while administrators need access to systems that carry greater risk if compromised.
Requiring the same MFA prompt for every login may seem like the safest approach. In practice, it can create unnecessary friction during routine office sign-ins without accounting for the conditions that make other access requests more sensitive.
With HENNGE Identity, the startup sets up a context-aware authentication model that adjusts requirements based on the user, the network location, and the device.
The result: faster access under trusted conditions and stronger verification when the context changes.
The Challenge: One MFA Rule Does Not Fit Every Login
The startup supports employees and administrators working from different locations throughout the week.
Some sign-ins come from approved devices connected to the company network. Others come from home offices, client locations, or public networks.
A static MFA policy forces a tradeoff.
Requiring OTP for every login interrupts users even when the device and network are already known. Removing it leaves remote access underprotected.
The IT team needs each access request to answer several questions:
Who is requesting access?
Where is the request coming from?
Is the device approved?
Do the current conditions require additional verification?
A password or OTP prompt alone does not provide all of that context.
Establishing a Strong Password Baseline
Before applying context-aware access controls, the startup strengthens its password policies.
Longer passwords, complexity requirements, failed-login limits, and temporary account lockouts help reduce exposure to password guessing, brute-force attacks, and credential stuffing.
Self-service password reset also allows employees to recover access without waiting for assistance from the small IT team.
These controls establish a stronger baseline. Conditional access then determines how authentication responds to each login.
Applying MFA When the Context Requires It
With HENNGE Identity, employees and administrators skip OTP when signing in from the office or another verified IP address.
Outside a trusted network, OTP is required automatically.
MFA stays in place. What changes is when it triggers: OTP applies based on the conditions of each request.
A routine sign-in from an approved office environment involves fewer steps. A remote login triggers additional verification without requiring the IT team to intervene.
Approved devices also remain part of the policy in both situations, preventing network location from becoming the only factor used to determine access.
The Outcome: Stronger Authentication with Less Routine Friction
A context-aware policy helps the startup:
Require stronger verification for remote access
Reduce unnecessary OTP prompts on trusted networks
Maintain consistent policies for employees and administrators
Limit access to approved devices
Strengthen resistance to credential-based attacks
Adapt authentication automatically as working conditions change
Employees can reach the applications they need more quickly when signing in under trusted conditions. When the location changes, the policy becomes stricter automatically.
What This Means for MSPs
Many MSP clients have adopted hybrid work without updating their authentication policies to reflect how users now access cloud applications.
Employees move between offices, homes, and other remote locations. Administrators require stronger protection. Clients want better identity security without making every login more disruptive.
This gap is particularly relevant for organizations using Microsoft 365 Business Standard or Google Workspace that do not have advanced Conditional Access capabilities in their current setup.
HENNGE Identity gives MSPs a way to:
Adjust MFA requirements based on network location
Apply different policies to different user groups
Require approved devices before granting access
Add identity controls without replacing the client’s cloud platform
Package context-aware access as part of a managed security service
For MSPs, this creates a practical way to strengthen identity security while keeping authentication aligned with how each client works.
Learn More About HENNGE
HENNGE helps IT teams and MSPs manage identity and control access across Microsoft 365, Google Workspace, and hundreds of other cloud services.
With HENNGE Identity, organizations can apply Conditional Access policies, verify trusted devices, and adjust authentication requirements based on user and network context.
To learn how HENNGE Identity could support your organization or client environments, contact our team or request a demo.
Interested in offering HENNGE Identity through your managed security services? Learn more about becoming a HENNGE partner.
This article presents an illustrative scenario based on a real HENNGE Identity configuration. The company, industry, workforce details, and use case are provided as examples to demonstrate how the controls may be applied. They do not represent a named customer deployment or verified customer results.
