Implementing Multi-Factor Authentication on Azure

Description

Multi-factor authentication or MFA is no longer optional, and it is paramount that you protect not only your privileged accounts but enable it for all accounts. Azure Active Directory offers the ability to secure your identities with an additional authentication method. Verification of your identity can be done via an automated voice call, text message, through the Microsoft Authenticator app, or with a verification code.

Azure multi-factor authentication can be enforced using different methods. We will configure the user settings to give the ability to a user to report fraudulent attempts on their accounts. We will also review how an administrator can provide a one-time bypass code and whitelist trusted locations to bypass the two-step verification. Lastly, you will see how to configure Azure Active Directory conditional access to enforce MFA on cloud-based applications.

Learning Objectives

Identify the different methods of enabling two-step verification
Configure multi-factor authentication for users
Configure settings for MFA
Implement Azure Active Directory conditional access for MFA

Intended Audience

People who want to become Azure administrators
People preparing for Microsoft’s AZ-101 or AZ-300 exam

Prerequisites

General knowledge of Azure Active Directory