Configuring user accounts for MFA

Azure MFA is enabled in Azure AD at the user level. To enable MFA for a user account in Azure AD, take the following steps:

1. Navigate to the Azure portal by opening https://portal.azure.com/.
2. Go to All services in the left menu, then type Azure Active Directory, and open the Azure AD resource.
3. In the Azure AD blade, under Manage, select Users.
4. In the All users blade, select Multi-Factor Authentication in the top menu.
5. You then will be redirected to the multi-factor authentication portal. There, select a user and click Enable at the right side of the screen:

   Figure 7.1 – Enabling MFA for a user

6. After clicking the link, you will receive the following warning:

   Figure 7.2 – MFA warning

7. Click enable multi-factor auth to activate MFA for this user.

Now that we have enabled MFA for the user, we can look at how to configure the verification methods.