Export Microsoft 365 per-user MFA statusĪn excellent way to check if the users configured per-user MFA is to use the script shown in the article Export Office 365 users MFA status with PowerShell. If they already did that, they will get a prompt to fill in the MFA request. This prevents breaches that result from brute force attacks and compromised credentials.įrom now on, the users need to configure MFA when they sign in. That’s it! You did successfully configure per-user MFA in Microsoft 365 and made the organization safer by adding an additional layer of security. Multi-factor authentication status shows Enforced for all users. Select the checkbox to select all the users on the page and click Enforce. Important: Keep MFA for service accounts disabled or add the IPs to the MFA service settings page to skip multi-factor authentication. It’s faster to Enable MFA Office 365 with PowerShell. Note: Suppose you have more than one page and must go through all the pages. Select the checkbox to select all the users on the page and click Enable. Go to the section verification options and select the methods you want to make available to the users. Navigate to Users > Active users > Multi-factor authentication. To configure per-user MFA in Microsoft 365, follow these steps: See the article Move from per-user MFA to Conditional Access MFA. Suppose you already have configured per-user MFA and have an Azure Premium plan 1 or 2 but have not yet moved to Azure AD MFA. Also, Microsoft adds more and more features to these CA policies. With Azure AD MFA, you will create a Conditional Access policy and have many options to configure MFA for the users, which is excellent.

It requires you to have Azure AD Premium plan 1 or 2. With per-user MFA, you don’t have a lot of options to configure, and you can only enforce, enable, and disable MFA for the users. Doing this will give the users sign-in issues.

Note: Only configure one of the below MFA methods, and don’t configure both simultaneously. It’s recommended to configure Azure AD Multi-Factor Authentication instead of per-user MFA (this article). Per-user MFA and Azure AD MFA are excellent for securing the user’s login.

Export Microsoft 365 per-user MFA status.

Office 365 mfa options