setup mfa for new azure account

Question

Just got my new azure subscription setup. I want to setup auth app to do mfa with new account setup, does not seem to trigger the setup process for mfa?

Answer 1

Hello @Mark A Rawson

If multi-factor authentication (MFA) isn’t being triggered for your new Azure account, it’s likely because Azure Entra ID (formerly Azure Active Directory) does not enforce MFA by default. To prompt users to set up MFA using an authentication app like Microsoft Authenticator, you need to enable either Security Defaults or configure a Conditional Access policy.

The simplest approach is to enable Security Defaults. To do this:

1. Go to the Azure Portal.
2. Navigate to Microsoft Entra ID > Properties.
3. Select Manage security defaults and set it to Enabled.

Once enabled, all users will be prompted to register for MFA during their next sign-in. This includes setting up the Microsoft Authenticator app, which they can download on their phone and use to scan a QR code for configuration.

If you require more granular control—for example, enforcing MFA only for specific users, groups, or applications—you can create a Conditional Access policy:

1. Go to Microsoft Entra ID > Security > Conditional Access.
2. Create a new policy and define the conditions under which MFA is required, such as access to certain apps or logins from untrusted locations.

Additionally, you can manually require a user to re-register for MFA:

1. Navigate to Users > Authentication methods in the Azure Portal.
2. Select the user and click Require re-register MFA.

Once one of these methods is configured, MFA setup using the authenticator app will be triggered automatically at the user's next sign-in.

We hope this information is helpful. If you need any further assistance, please feel free to reach out — we're happy to help.

Answer 2

Hello,

According to my understanding regards to your question, there could be 02 scenarios can be happend here. Please have a check which scenario is fit with you for more instruction:

Scenario 1**:** In case that you want to do MFA when creating a new account for admin (that means the admin account has not created yet). If this is, Entra ID does not have this feature

Scenario 2: If the admin account is already created and logs in Microsoft resource, MFA can be set up as below:

1. Enable MFA for Your Account:

• Sign in to the Microsoft Entra admin center (https://entra.microsoft.com) as a Global Administrator or Security Administrator.
• Open Users > All Users > Per-user MFA > choose the created account > Enable MFA
• Go to Identity > Users > All users > select your account.
• Under Manage > Authentication methods, click Add authentication method or Register for MFA if prompted.
• Action: If MFA isn’t enabled, go to Identity > Security > Multifactor authentication > select your user > Enable.

2. Set Up Microsoft Authenticator App:

• Download the Microsoft Authenticator app from the App Store (iOS) or Google Play (Android).
• Sign in to https://aka.ms/MFASetup with your Azure account.
• Follow prompts to add a new account:

Select Work or school account.

Scan the QR code displayed on the screen using the Authenticator app.

Approve a test notification to verify setup.

• Action: If the setup doesn’t trigger, manually initiate it by clicking Set up Authenticator app at https://aka.ms/MFASetup.

3. Verify MFA Configuration:

• In Entra admin center > Users > select your account > Authentication methods, confirm Microsoft Authenticator is listed.
• Test by signing out and signing back in, ensuring the Authenticator app prompts for approval.

4. Check Conditional Access (if MFA not triggering):

• Go to Identity > Security > Conditional Access > Policies.
• Ensure a policy requires MFA for your account or All users (e.g., “Require MFA for all sign-ins”).
• Action: Create a new policy if none exists:
• Click New policy > set Users to your account, Cloud apps to All, Grant to Require multifactor authentication.

Recommendations:

• Ensure your account has a valid phone number or email for backup verification at https://account.microsoft.com/security.
• Enable Security Defaults for a new tenant: Entra admin center > Properties > Manage security defaults > Enable.
• If MFA setup still doesn’t trigger, check Sign-in logs in Entra admin center > Monitoring > Sign-ins for errors.
• Open a ticket via Azure Portal > Help + support if issues persist.

For more information, please visit: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-userdevicesettings

---

If I have answered your question, please accept this as answer as a token of appreciation and don't forget to thumbs up for "Was it helpful"!

Best regards,