A county assessor's office needs MFA options that still work for field inspectors who often have limited cell signal. What should the identity plan emphasize?

Field inspectors for a county assessor's office often work where cellular coverage is weak, so MFA method planning must match real connectivity. Mapping authentication methods that remain usable offline or with poor signal—such as authenticator app OATH codes generated on-device, hardware tokens, or other supported methods suited to field conditions—keeps MFA enforceable without forcing inspectors to abandon strong authentication outside city hall. Usability of factors is part of a sound municipal identity plan.

Providing Temporary Access Passes for repeated offline authentication by field inspectors with poor connectivity fails by concept because passes are short-lived, single-use onboarding credentials for bootstrapping stronger methods, not a reusable MFA method for daily field sign-ins. Prioritizing passwordless phone sign-in via the authenticator app for field inspectors with poor connectivity fails in the field because phone sign-in still depends on connectivity between the phone and Entra to complete the approval, which is exactly the constraint poor-signal inspectors cannot rely on. Requiring device compliance checks via Conditional Access for offline field inspectors with poor connectivity fails because compliance evaluation requires reaching Entra and Intune for a fresh compliance signal and is an access condition rather than an offline-capable authentication factor, so it cannot substitute for a usable MFA method when disconnected.

Exam caveat: AB-900 expects recognition that method choice should fit operational constraints, not a deep comparison matrix of every Entra authentication method. Prefer describing resilient MFA planning over recommending elimination of MFA. Temporary Access Passes may still appear in real tenants for onboarding but are not the ideal sole answer for poor-coverage field work.

Operational check: Survey inspector coverage areas, enable at least one MFA method that works with intermittent connectivity, enroll field accounts, and test sign-in in a low-signal drill. Confirm help-desk recovery paths exist without sharing factors. Document that assessor field accounts keep MFA enabled with methods matched to connectivity reality.