Aka.ms/mfasetup

Aka.ms/mfasetup is one of the best ways to keep your business safe. It means that you and employees must use more than one way to sign in to Microsoft 365. Now that you know how multifactor authentication (MFA) works and that Microsoft 365 supports it, it's time to set it up and make it available to everyone in your company.

How to Turn on Multi Factor Authentication - Aka.ms/mfasetup

Aka.ms/mfasetup or multi-factor identification, is a very important first step in securing the security of your business. You can use security settings or Conditional Access rules in Microsoft 365 for Business to turn on MFA for your manager and user accounts.

1. Go to https://admin.microsoft.com to enter the Microsoft 365 admin center.

2. Select Show All, and then select the Azure Active Directory Admin Center.

3. Choose Azure Active Directory, Properties, and then Manage Security Defaults.

4. Under Enable Security settings, click Yes and then Save.

Before You Begin With Aka.ms/mfasetup

• You have to be a Global manager to handle MFA. 

• If you have an legacy per-user MFA on, Turn off the legacy per-user MFA.

• Turn on Modern Authentication for Office 2013 clients if you have Office 2013 clients on computers with Windows.

• Set up the Azure Aka.ms/mfasetup Server if you use Active Directory Federation Services (AD FS) and third-party directory services.

Turn Security Defaults on or Off

For the majority of organizations, Security defaults provide an adequate level of additional sign-in protection. If your subscription is new, the default security settings may have been activated for you automatically. The Properties pane for Azure Active Directory in the Azure portal is where you enable or disable security defaults.

1. Log in as global admin to the Microsoft 365 admin center.

2. Choose Azure Active Directory from the left menu.

3. Azure Active Directory > Properties.

4. Choose Manage Security settings.

5. Choose "Yes" to enable security defaults or "No" to turn them off, and then click "Save."

Setting Up Your Microsoft 365 Sign-in for Aka.ms/mfasetup

Setting up Aka.ms/mfasetup provides your Microsoft 365 account sign-in as an extra measure of security. For example, you might first type in your password and then, when asked, type in a verification code that is made up on the spot by an authenticator app or sent to your phone.

• Sign into Microsoft 365 using your work or school account and password. Sign in will prompt additional information.

• Pick the Next Option.

• The free Microsoft Authenticator app is used by default. If your phone has it, click Next and follow the instructions to add this account. If you prefer SMS texts to your phone, choose I want to set up a different method.

• The next time you sign in to Microsoft 365, you'll be prompted to provide additional verification information or action, such as typing the verification code from your authenticator app or text message.