Then select Security from the menu on the left-hand side. Search for and select Azure Active Directory. Sign in to the Azure portal by using an account with global administrator permissions. In a later tutorial in this series, we configure Azure AD Multi-Factor Authentication by using a risk-based Conditional Access policy.įirst, create a Conditional Access policy and assign your test group of users as follows: In this tutorial, we create a basic Conditional Access policy to prompt for MFA when a user signs in to the Azure portal. The goal is to protect your organization while also providing the right levels of access to the users who need it. Conditional Access lets you create and define policies that react to sign-in events and that request additional actions before a user is granted access to an application or service.Ĭonditional Access policies can be applied to specific users, groups, and apps. The recommended way to enable and use Azure AD Multi-Factor Authentication is with Conditional Access policies. If you need more information about creating a group, see Create a basic group and add members using Azure Active Directory.In this tutorial, you enable Azure AD Multi-Factor Authentication for this group. For this tutorial, we created such a group, named MFA-Test-Group. If you need information about creating a user account, see Add or delete users using Azure Active Directory.Ī group that the non-administrator user is a member of.In this tutorial, you test the end-user experience of configuring and using Azure AD Multi-Factor Authentication. For this tutorial, we created such an account, named testuser. For more information, see Authentication Policy Administrator.Ī non-administrator account with a password that you know. Some MFA settings can also be managed by an Authentication Policy Administrator.

To complete this tutorial, you need the following resources and privileges:Ī working Azure AD tenant with Azure AD Premium P1 or trial licenses enabled.Īn account with Conditional Access Administrator, Security Administrator, or Global Administrator privileges.

Test configuring and using multi-factor authentication as a user.Configure the policy conditions that prompt for MFA.Create a Conditional Access policy to enable Azure AD Multi-Factor Authentication for a group of users.

Conditional access mfa