Nowadays, using only a username and a password is not enough when securing access to our accounts. When you have an Azure subscription under your control that holds many different production environments, you cannot rely only on the fact that an attacker does not know your password.
This is where MFA comes into play – the abbreviation stands for Multi-Factor Authentication and describes an additional method of authentication that leverages extra components during the sign-in process (such as a mobile phone or a token device). Fortunately, MFA is one of the features of Azure AD and can be enabled to enhance the security of your tenant.
To get started, you will need to go to your Azure AD tenant in the Azure portal and access the Security blade. To do so, search for Azure Active Directory using the search box at the top of the portal:
In the Manage section...