Setting Up MFA in Microsoft 365
### Easiest Method — Security Defaults
1. admin.microsoft.com → Azure Active Directory → Properties
2. Manage Security Defaults → Enable → Save
This enforces MFA for all users automatically.
### Per-User MFA
1. Users → Active users → Multi-factor authentication
2. Select users → Enable
### User First Sign-in After MFA
1. Download Microsoft Authenticator app
2. Scan QR code shown on screen
3. Verify with a test code
### Alternative Methods
- SMS/Text message code
- Phone call with approval
- OATH hardware token
### User Lost Their Phone?
Admin → Users → Manage multi-factor authentication → Delete their registration → User re-registers on next sign-in