@Ankit Rathod · Thank you for reaching out.
In all Microsoft 365 plans, Azure AD Multi-Factor Authentication can be enabled on a per-user basis and the management of Azure MFA is done through the Microsoft 365 portal.
If you want to enable or disable MFA for all users at once, it can be done using Security Defaults. This feature is available for free and the limitation is, you can not enable MFA for a specific set of users, it can be either all users or no users.
To configure SSO, you can configure Seamless SSO in Azure AD connect. Please refer to below docs for better understanding:
- What is Azure Active Directory Seamless Single Sign-On?
- Azure Active Directory Seamless Single Sign-On: Quickstart
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.