Manage MFA
Last updated
Was this helpful?
Last updated
Was this helpful?
This article describes how administrators can manage multi-factor authentication for Office 365® users.
Applies to: Administrator
Difficulty: Easy
Time Needed: Approximately 15 minutes
Tools Needed: Administrators need access to the Office 365 Control Panel
For more information about prerequisite terminology, see .
Requiring multi-factor authentication for all users safeguards access to your organization's data and applications. Multi-factor authentication requires users to provide a second form of authentication when accessing their account. This second form of authentication is an additional layer of security and minimizes the chances of account compromise.
Use the following steps to enable multi-factor authentication for a user:
Log in to your .
From the left menu, select Office 365 Admin Center.
From the top menu, select Multi-factor authentication.
Select the check box next to the user you need to enable multi-factor authentication for.
Under quick steps, select Enable.
When you are prompted, select enable multi-factor auth.
The selected user is now able to configure multi-factor authentication for their account.
Require a user to use multi-factor authentication
To require a user to use multi-factor authentication, you must enforce multi-factor authentication for their account.
Use the following steps to enforce multi-factor authentication for a user:
From the left menu, select Office 365 Admin Center.
From the top menu, select Multi-factor authentication.
Select the check box next to the user you need to enforce multi-factor authentication for.
Under quick steps, select Enforce.
When you are prompted, select enforce multi-factor auth, then close.
The selected user is now required to configure and use multi-factor authentication for their account.
Your user may lose access to the device that they used to register with multi-factor authentication. When this occurs, you need to reset their multi-factor settings so that they can re-register.
Use the following steps to reset the existing multi-factor authentication configuration for a user:
From the left menu, select Office 365 Admin Center.
From the top menu, select Multi-factor authentication.
Select the check box next to the user you need to enforce multi-factor authentication for.
Under quick steps, select Manage user settings.
Select the check box next to Require selected users to provide contact methods again.
Select save then close.
The selected user can now log in to their Office 365 account and re-register with multi-factor authentication.
Use the following steps to disable multi-factor authentication for a user:
From the left menu, select Office 365 Admin Center.
From the top menu, select Multi-factor authentication.
Select the check box next to the user you need to disable multi-factor authentication for.
Under quick steps, select Disable.
When you are prompted, select yes, then close.
The selected user is now no longer be able to use multi-factor authentication with their account.
Log in to your .
Log in to your .
Log in to your .
Microsoft® also provides a guide for deploying multi-factor authentication for your Office 365 tenant. See .
Administrators can configure organization-wide multi-factor authentication requirements by creating a Conditional Access policy in their Azure® Active Directory® from the . See for instructions.