Azure AD and MFA

Jackie Butler 236 Reputation points
2020-09-17T19:12:09.053+00:00

We currently are using Azure AD for O365 and will eventually do the AD connect.
With the MFA function does the MFA require you to log in on a desktop then brings up the second authentication?
Does MFA protect the desktop or only the O365 apps?

Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,629 questions
{count} votes

Accepted answer
  1. Andy David - MVP 145.6K Reputation points MVP
    2020-09-17T19:19:33.683+00:00

    MFA protects the 365 apps and portal access so you wont prompted till you access the Azure/365 portals or apps.

    MFA Desktop protection can managed with Windows Hello:
    https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-identity-verification

    or with Virtual Desktop:

    https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa

    1 person found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Jackie Butler 236 Reputation points
    2020-09-17T19:21:24.753+00:00

    If the device doesn't have windows hello can MFA still be used to protect the desktop at sign in?