enable MFA for Azure

Question

Hello,

as I am using a company account with visual Studio subscription for Azure login: Do I need MFA and where can I find this information?

Is setting multifactor authentication additional to company account neccessary?

kind regards

Ottilie Steinhauer

Answer 1

@Steinhauer, Ottilie

Thank you for posting this in Microsoft Q&A.

Multifactor authentication is a process in which users are prompted during the sign-in process for an additional form of identification, such as a code on their cellphone or a fingerprint scan.

If you only use a password to authenticate a user, it leaves an insecure vector for attack. If the password is weak or has been exposed elsewhere, an attacker could be using it to gain access. When you require a second form of authentication, security is increased because this additional factor isn't something that's easy for an attacker to obtain or duplicate.

Microsoft Entra multifactor authentication works by requiring two or more of the following authentication methods:

• Something you know, typically a password.
• Something you have, such as a trusted device that's not easily duplicated, like a phone or hardware key.
• Something you are - biometrics like a fingerprint or face scan.

The following additional forms of verification can be used with Microsoft Entra MFA:

• Microsoft Authenticator
• Authenticator Lite (in Outlook)
• Windows Hello for Business
• Passkey (FIDO2)
• Passkey in Microsoft Authenticator (preview)
• Certificate-based authentication (when configured for multifactor authentication)
• External authentication methods (preview)
• OATH hardware token (preview)
• OATH software token
• SMS
• Voice call

You can refer below article to get more information on how to enable and use MFA in Entra ID:

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks#how-to-enable-and-use-microsoft-entra-multifactor-authentication

Now recently, Microsoft has made an announcement that all user account trying to access Azure portal will by default be prompted for MFA.

This will be starting from 15 October 2024.

https://azure.microsoft.com/en-us/updates/v2/Enable-multifactor-authentication-for-your-tenant-by-15-October-2024

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication

There is no specific license required to receive this new requirement. However, there are some licensing requirements around what MFA methods are available to the users.

You can check below article to get more information on what option are available for different licenses,

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-licensing#feature-comparison-based-on-licenses

Let us know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.