#Microsoft 365 mfa setup how to
#Microsoft 365 mfa setup update
#Microsoft 365 mfa setup android

So they got an SMS text which isn’t really user-friendly

Some users didn’t notice they had to select the mobile app in step 1.

So make sure you have informed your user upfront with a clear user guide on the steps they have to take. When you enable MFA for a user it will, at the next login, get a screen that additional security measure is required. Read more about those features in this article.

To mitigate the risk, you can enable number matching and/or add additional context (location and app) to the MFA request. You can’t see where the request is coming from, which is a security risk. Enable Location and Number Matchingīy default, the MFA request on your phone only asks if you want to improve or deny the request. I also created a script to get the MFA status of your users that you can find in this article. I have created a small script to enable MFA with PowerShell that you can find here. The advantage of using PowerShell is that you can automate it, so you never forget the enable it for a user.

#Microsoft 365 mfa setup update

Just click on the bulk update button and download the sample file Using PowerShell to enable MFAĪnother option is to use PowerShell to enable MFA. This works with a simple excel file containing the usernames and the required status (enable, disable). You can also enable multi-factor authentication with the bulk update feature. At the moment you enable Office 365 MFA for a user it can get the setup screen as soon as the users browse to one of the Office 365 products. Here you can select single or multiple users to enable MFA. Make sure that trusted devices is set to 90 days atleast.Īfter you have set the settings to your liking click on save and then on users (just below the title Multi-factor authentication). Only enable them when you really need them. Cell to phone and text message to phone is also less secure. You should prevent the use of these kinds of apps in your tenant.

This is only needed for apps that don’t support multi-factor authentication. The button to the settings screen doesn’t stand out, but it’s just below the titleĪ few settings are important here: Make sure you check “Do not allow user to create App password”. You will find the button in the toolbar.īefore we start enabling MFA for the users, we first go through the service settings.

Open the Admin Center and go to Users > Active Usersĭon’t select any user yet, just open the Multi-factor authentication screen.

You need to be tenant Admin to set up MFA for your Office 365 tenant. One of the features that I really miss compared to the Azure MFA version is the One-Time bypass and the Trusted IPs.

#Microsoft 365 mfa setup android

App password for clients that don’t support MFA (Gmail app on Android for example).Mobile app (Microsoft Authenticator app).But more than enough for a good additional security layer on your user sign-ins. Multi-Factor Authentication for Office 365 doesn’t offer all the security features that are available in the Azure MFA version. What isn’t protected with MFA is, for example, logging in on your computer. This means that all Office 365 Online applications are protected and also the OneDrive client and Outlook application. With Office 365 MFA you can only protect Office 365 applications. Multi-factor authentication is part of the Microsoft 365 business (and Office 365) plans. Office 365 MFA Licenseīefore we start with the setup of MFA in Office 365, we will take a quick look at the license.

Especially in older tenants this needs to be enabled manually. Note Make sure that you have enabled modern authentication.

#Microsoft 365 mfa setup how to

In this article, I will walk you through the setup process of Office 365 multi-factor authentication and give you some tips on how to roll it out in your organization.