Microsoft 365 multi-factor authentication

Why implement Microsoft 365 multi-factor authentication?

Given the sophisticated nature of recent cyberattacks engineered by hackers, there is a pressing need to go beyond passwords to protect user accounts. Multi-factor authentication (MFA) can prove useful or even essential to achieve this. Microsoft 365, previously Office 365, is a business software suite widely used across the globe. Let's see how to enable MFA in Microsoft 365 and then look at a better solution.

Setting up MFA for Microsoft 365

MFA for Microsoft 365 user accounts can be configured through the Azure AD admin center. Here are the steps involved:

1. Go to the Azure AD Admin Center.
2. Navigate to Users > All Users.

   

3. Select the More option and click Multi-Factor Authentication.
4. Here you can enable MFA for multiple users using a bulk update. You can also check the boxes next to the required user accounts and enable MFA for them.

   

   The three available verification methods are:

   • Email my alternate mail: A verification code is sent to the user's alternate email address.
   • Text my mobile phone: A verification code is sent to the user's registered phone number as a text message.
   • Call my mobile phone: A verification code is given to the user through a phone call to the registered mobile number.

Note: The admin can register users' alternate email IDs and phone numbers to enable Microsoft 365 MFA for them. They can also let users enter this information themselves.

How Microsoft 365 MFA works on the user's end

When users log in after the admin has enabled MFA for them, they will be asked to set up verification details required to complete the MFA configuration. They can choose to get the verification code through a text message, call, or push notification to the Microsoft app.

Secure Microsoft 365 logons with ADSelfService Plus MFA

ADSelfService Plus is an integrated self-service password management and single sign-on solution. ADSelfService Plus offers over 17 advanced authentication techniques including biometrics, YubiKey, Google Authenticator, and more. Microsoft 365 accounts can be protected by these methods once single sign-on is enabled from ADSelfService Plus for Microsoft 365.

Why choose ADSelfService Plus MFA

• Flexible authenticators: Select from over 17 different authentication methods including biometrics, RADIUS server authentication, and simple push notifications.
• Customizable MFA: Choose the number of authenticators and their priority according to your requirements.
• Risk-based MFA: Implement different sets of authenticators according to the user's privileges, location, device, and more.
• MFA for multiple platforms: Enable MFA for machine logons, VPN logons, password resets, account unlocks, application logons, and portal access all from a single console.