This works with a simple excel file containing the usernames and the required status (enable, disable). You can also enable multi-factor authentication with the bulk update feature. Here you can select single or multiple users to enable MFA.Īt the moment you enable Office 365 MFA for a user it can get the setup screen as soon as the users browse to one of the Office 365 products. Make sure that trusted devices is set to 90 days atleast.Īfter you have set the settings to your liking click on save and then on users (just below the title Multi-factor authentication).

Only enable them when you really need them. You should prevent the use of these kinds of apps in your tenant.Ĭell to phone and text message to phone is also less secure.

This is only needed for apps that don’t support multi-factor authentication. Make sure you check “Do not allow user to create App password”. The button to the settings screen doesn’t stand out, but it’s just below the title You will find the button in the toolbar.īefore we start enabling MFA for the users, we first go through the service settings. Open the Admin Center and go to Users > Active Usersĭon’t select any user yet, just open the Multi-factor authentication screen.You need to be tenant Admin to set up MFA for your Office 365 tenant. One of the features that I really miss compared to the Azure MFA version is the One-Time bypass and the Trusted IPs. App password for clients that don’t support MFA (Gmail app on Android for example).Mobile app (Microsoft Authenticator app).But more than enough for a good additional security layer on your user sign-ins. Multi-Factor Authentication for Office 365 doesn’t offer all the security features that are available in the Azure MFA version. What isn’t protected with MFA is, for example, logging in on your computer. This means that all Office 365 Online applications are protected and also the OneDrive client and Outlook application. With Office 365 MFA you can only protect Office 365 applications. Multi-factor authentication is part of the Microsoft 365 business (and Office 365) plans. Office 365 MFA Licenseīefore we start with the setup of MFA in Office 365, we will take a quick look at the license. Especially in older tenants this needs to be enabled manually. Note Make sure that you have enabled modern authentication. In this article, I will walk you through the setup process of Office 365 multi-factor authentication and give you some tips on how to roll it out in your organization.

Office 365 mfa options