Unit 4: Exercise – Enable Microsoft Entra Multifactor Authentication

This unit demonstrates how to configure and enable MFA using Conditional Access.

Configure MFA Options

Steps include:

• Sign in to the Azure portal using an Authentication Administrator role.
• Navigate to Microsoft Entra ID, then Security, then Multifactor Authentication.
• Open Additional Cloud-Based MFA Settings.
• Review options such as app passwords or supported verification methods.

App passwords allow legacy apps that do not support MFA to authenticate using a unique password.

Set Up Conditional Access for MFA

Steps include:

• Create a new Conditional Access policy.
• Choose users or groups to include.
• Select the cloud apps requiring MFA.
• Configure conditions such as locations.
• Grant access but require MFA.
• Enable the policy.

After the policy is active, affected users will be prompted to register and use MFA during sign-in.