Azure Active Directory Multi Factor Authentication and Security defaults

Azure AD vs Security Defaults: office365conce...
#azuread
#azureactivedirectory #whatisazuread
This is the 4th video of Azure Active Directory series. In this video you will learn what are Security Defaults in Azure AD. You will learn the difference between Security Defaults and Azure AD MFA, How to configure Security defaults and how to configure Azure AD MFA using Conditional Access policies.
What is Azure Active Directory : • Azure Active Directory...
Add custom domain in Azure AD and add company branding to sign-in page : • Add custom domain in A...
Manage users and groups in Azure Active directory : • Users and Groups in Az...

[@ageorge8174]

Thank you so much for these set of videos. I shared it with my friend the moment i started listening to you. I appreciate you.

[@abdulmannanmunshi5]

I will share this channel in my community

[@aayanel4167]

This was not only seamless to enable but very concise as well.

[@MrTech319]

Appreciate your short ,easy and clear explanation ,Keep going

[@Office365Concepts]

Thank you Sarvesh.

[@amarsoni313]

Thank you for all this series, I always wait for your next video...Very informative...

[@Office365Concepts]

Glad to hear this. Thank you Amar.

[@ganeshbharate4347]

Thanks for crystal clear explanation

[@James-sc1lz]

Good video. Everyone, make sure you have an exclusion for users that have global Admin!! Do not lock yourself out. MS will not be able to help you. At last they have a warning in the portal. They never did this before.
What this video does not answer for me is if users are already registered previously with the auth app because they need to use this with cecurity defaults, why does it ask this again. Re-registration should be able to be avoided.

[@NaushadKhan-nw8lw]

Thank you for making such very help ful video.

[@Office365Concepts]

Thank you.

[@lxdgr3t]

in the last config, you did not mentioned the "session" config.
if not configured, the 2fa will be asked only if user was not active for 90 day from last 2fa authentication.
if you wish for 2fa on evry login, you will need to change the session part.

[@youknowme6780]

Gud one, also include cases as what types of issues customers or users will face on day to day

[@Mohit_Kush21]

Good explanations

[@subbusathish8476]

Hi Team, You are guys are doing a great job in covering these topics. One thing from this video i couldn't understand. The MFA registration request is replicating only after enabling the Default Security Service, then what is the difference there? . Why both are different? both should be same right?

[@ankitpandey-wv3uj]

Well explained sir

[@Office365Concepts]

Thank you.

[@AndriiKorol-um5ow]

Thank you for the video!!!
Maybe you know, how to handle the MFA flow via Postman?

[@srikanthsatyanarayana4457]

Very nice to see your videos, i need information about configuring MFA for on prem server environment.

[@mrkhan4737]

Please create a VDO on "Detecting and Protecting Azure AD from Password Spray Attacks".... This is very important

[@angelcarolin1250]

Very nice🎉

[@Rissitube]

good work bro keep doing

[@Office365Concepts]

Thank you.

[@mladenpokric350]

Hello, thanks for your video.
What is your advice for the company, for the people they dont want to use their private mobile phones, or they dont have Company mobile phones?
Can you show you one example for the Token acees?
Thanks!

[@user-qu4dd6ft3j]

At 6:41 there is an option "I want to user a different authenticator app". I believe you can choose some other app than the Microsoft Authenticator from there?

[@Office365Concepts]

Yes, using that option you can use other apps for authentication instead of Microsoft authenticator app.

[@mahmoudfarzi3721]

Despite learning easy, I couldn't get what was the 'conditions' in MFA policy implementing

[@saikishore7444]

Thank you for your videos most understandable .I have few questions could you clarify please ?
1. We have enabled MFA for users and we have only office 365e3 licenses in hybrid AD environment . Conditional access policies showing disabled since not having p2 or e5 licenses
2. Is it required to enable MFA for shared mailboxes which those are unlicensed ?

[@Office365Concepts]

Hi, for shared mailboxes MFA is not required, because their sign-in should be disabled. Shared mailboxes are not meant for the direct logins. They should be accessed through permissions as a secondary mailbox. I hope this answers your query.

[@lokeshnarayan1299]

Sir, can you please have video for dag?

[@clarke0581]

How do you add MFA to prompt on al windows 11 sign in screen?

[@jaredf0112]

Is there anyway to enforce MFA on ALL logins when using security defaults?

[@Office365Concepts]

Security defaults is applied to all users. You can use MFA along with Security defaults.

[@jaredf0112]

@@Office365Concepts security defaults enables MFA (enforced user to enroll), but I don’t see how to enforce MFA on every login?

[@anandkirtineha]

In Office 365 I have one issue comes after 2-3 months after enabling MFA on my tenant that outlook prompt password and OTP again and again. When I disable MFA it runs well. Security defaults is disabled in my tenant. can you please suggest what will be the issue.

[@Office365Concepts]

Hi Anand, if enabling MFA is creating this issue then make sure you are using Outlook version that supports Modern Authentication. You can run SaRA (Microsoft Support and Recovery Assistant) Advanced Diagnostic logs to check event logs. Please refer to below links for SaRA tool:
th-cam.com/video/oQWMYg98TQo/w-d-xo.html
th-cam.com/video/UV2maVj5Nl8/w-d-xo.html

[@anandkirtineha]

@@Office365Concepts Thanks for prompt reply. we are using office 2019 and Office 2021 only. I raised ticket to Microsoft Even Microsoft did not resolve the issue. I will try to run SaRA tool. Thanks.