
<p> Two-step verification is important for modern workplaces especially when employees are working remotely more and more, organisation boundaries are limitless, Data can be accessed from anywhere and on any device. </p>



<h4 class="wp-block-heading">Microsoft Multi-Factor Authentication offers comes in following flavors. </h4>



<ul class="wp-block-list"><li><strong>Azure Active Directory Premium licenses</strong> ;&#8211; Full featured use of Azure Multi-Factor Authentication Service (Cloud) or Azure Multi-Factor Authentication Server (On-premises).</li><li> <strong>Multi-Factor Authentication for Office 365</strong> ;&#8211; A subset of Azure Multi-Factor Authentication capabilities are available as a part of your subscription. </li><li> <strong>Azure Active Directory Global Administrators</strong> ;&#8211; A subset of Azure Multi-Factor Authentication capabilities are available as a means to protect global administrator accounts. </li></ul>



<h3 class="wp-block-heading">Features Comparisons </h3>



<p>

The following table provides a list of the features that are available in the various versions of Azure Multi-Factor Authentication.

</p>



<div class="wp-block-image"><figure class="aligncenter is-resized"><img src="http://www.thecloudxperts.co.uk/wp-content/uploads/2019/01/image-999x1024.png" alt="" class="wp-image-629" width="467" height="478"/></figure></div>



<h3 class="wp-block-heading"> Setting up Multi-Factor Authentication</h3>



<p>First thing first, <strong>Buy and Assign a licence</strong> to your users. There are two ways to buy MFA service from Microsoft </p>



<ul class="wp-block-list"><li>Buy licenses for each user (Either Azure MFA, Azure AD Premium, or Enterprise Mobility + Security)</li><li>Create a Multi-Factor Auth Provider and pay per-user or per-authentication</li></ul>



<p> There are two ways to<strong> configure users for multi-factor authentication (MFA) </strong>in Azure Active Directory &#8212; user-based MFA and using Conditional Access. </p>



<ul class="wp-block-list"><li> User-based MFA, users are always prompted for MFA whenever they access a cloud resource, such as Exchange Online, SharePoint, Teams, etc. It&#8217;s either on or off. ; </li><li>Conditional Access MFA, Users will be prompted for MFA when the conditional access policy applies to them on the basis of location etc. </li><li></li></ul>



<p><strong>Note</strong><g class="gr_ gr_28 gr-alert gr_gramm gr_inline_cards gr_run_anim Style replaceWithoutSep" id="28" data-gr-id="28"><strong>:</strong></g></p>



<ul class="wp-block-list"><li>It&#8217;s important to understand that you don&#8217;t need to enable MFA in Azure AD to enable Conditional Access MFA capability, Actually, you should not configure as it will override the conditional access policies. </li><li>There are two places to configure trusted networks and IP addresses, First one is for user-based MFA and second is for conditional access. These two settings are unique for each configuration and do not affect each other. </li><li>A user logging in from an unmanaged device should be prompted for multi-factor authentication , A user logging in from a managed device should not be prompted for multi-factor authentication </li></ul>



<p></p>



<p></p>



<p></p>





<p></p>



<p> </p>

