AAD password protection

Azure MFA keeps most intruders out – and proactively prevents other people from getting access to your environment with only the password. This isn't enough, as there are more Microsoft services to leverage in order to secure your user accounts.…

Avoid bad passwords with the AAD password protection feature. With AAD password protection, default global banned password lists are automatically applied to all users in an AAD tenant. You can define entries in a custom banned password list to support your own business and security needs.

Adding this feature would assure you, as an IT administrator, that the most common passwords – which are no different every year – stay in the past!

You can find the Password protection feature under Authentication methods in the Azure portal. You can also change the lockout thresholds here.

Figure 13.29 – Password protection

Note

Password protection...