Make sure you check “Do not allow user to create App password”. The button to the settings screen doesn’t stand out, but it’s just below the title

You will find the button in the toolbar.īefore we start enabling MFA for the users, we first go through the service settings.

Open the Admin Center and go to Users > Active Usersĭon’t select any user yet, just open the Multi-factor authentication screen.

You need to be tenant Admin to set up MFA for your Office 365 tenant. One of the features that I really miss compared to the Azure MFA version is the One-Time bypass and the Trusted IPs.

App password for clients that don’t support MFA (Gmail app on Android for example).

Mobile app (Microsoft Authenticator app).

But more than enough for a good additional security layer on your user sign-ins. Multi-Factor Authentication for Office 365 doesn’t offer all the security features that are available in the Azure MFA version. What isn’t protected with MFA is, for example, logging in on your computer. This means that all Office 365 Online applications are protected and also the OneDrive client and Outlook application. With Office 365 MFA you can only protect Office 365 applications. Multi-factor authentication is part of the Microsoft 365 business (and Office 365) plans. Office 365 MFA Licenseīefore we start with the setup of MFA in Office 365, we will take a quick look at the license.

Especially in older tenants this needs to be enabled manually. Note Make sure that you have enabled modern authentication. In this article, I will walk you through the setup process of Office 365 multi-factor authentication and give you some tips on how to roll it out in your organization.

Setup mfa office 365