How to setup Multifactor Authentication for Office 365 Global Administrators
MFA – Multifactor Authentication is a hot topic these days with Office 365 and Microsoft Secure Score.
Frequently, we see the recommendation to enable MFA for all Global Administrations at the top of recent Office 365 Secure Score reports, with values up to 50 points.
MFA helps to keep accounts more secure by requiring an additional level of authentication, making sure that the account that is logged in is:
- An actual person, and not a robot, script, or malicious code; and
- The same person must respond via an automated call, text, email, or apply authentication via smartcard, biometric device or code.
How do I enable MFA for Office 365 Global Admins?
To enable MFA for a Global Admin or group of Global Admins, in the Admin console, click on Users | Active Users | More (top menu) | Multifactor Authentication Setup | (wait for the MFA window to pop-up), Click to Enable the user(s) | Click Enable Multi-Factor Authentication.
- Log into Office 365 as a Global Admin
- In the Admin Console, click on Users | Active Users.
- Click on the More tab. Then click Multifactor Authentication setup.
- The Multi-Factor Authentication window will appear.
- In the VIEW pull-down, choose Global Administrators.
- Highlight the accounts that you’d like to add Multifactor Authentication to (notice on the right column is the MFA Status). Option: You can also click the checkmark on the top left to choose all the Global Admins for MFA enablement.
- Once highlighted, click on Enable. The About enabling Multi-Factor Auth box will pop-up.
- Click the Enable Multi-factor Auth option.
- Then, if successful, you will see the Updates Successful window. Click on CLOSE and test with the desired account. ]
Note: This can be activated for any users, not only Global Administrators. To do so, repeat steps 1 through 4 and select any of the other options under View. Then select the user(s) for MFA enabling. Then view the accounts in the MFA window, and it should show the newly MFA-enabled accounts as Enabled.