The goal is to protect your organization while also providing the right levels of access to the users who need it. Conditional Access lets you create and define policies that react to sign-in events and that request additional actions before a user is granted access to an application or service.Ĭonditional Access policies can be applied to specific users, groups, and apps. The recommended way to enable and use Azure AD Multi-Factor Authentication is with Conditional Access policies. If you need more information about creating a group, see Create a basic group and add members using Azure Active Directory.In this tutorial, you enable Azure AD Multi-Factor Authentication for this group. For this tutorial, we created such a group, named MFA-Test-Group. If you need information about creating a user account, see Add or delete users using Azure Active Directory.Ī group that the non-administrator user is a member of.In this tutorial, you test the end-user experience of configuring and using Azure AD Multi-Factor Authentication. For this tutorial, we created such an account, named testuser. For more information, see Authentication Policy Administrator.Ī non-administrator account with a password that you know.

Some MFA settings can also be managed by an Authentication Policy Administrator. To complete this tutorial, you need the following resources and privileges:Ī working Azure AD tenant with Azure AD Premium P1 or trial licenses enabled.Īn account with Conditional Access Administrator, Security Administrator, or Global Administrator privileges.

Test configuring and using multi-factor authentication as a user.

Configure the policy conditions that prompt for MFA.Create a Conditional Access policy to enable Azure AD Multi-Factor Authentication for a group of users.

Mfa authenticator app