How to enable Multi-Factor Authentication for Azure AD account login

This is a step by step guide for enabling Azure Multi-Factor Authentication for Azure AD Users.
The procedure is pretty straight forward,
1.    Login into Azure Portal -> Active Directory -> Users -> Manage MULTI-FACTOR AUTH at the bottom
2.    Select a user/users to enable Multi-Factor Authentication
3.    Pop-up displays, continue “enable Multi-Factor Authentication”

4.     Confirm “enabled”
5.    Continue “Enforce”

6.    Continue “Enforce”

Comments

Post a Comment

Popular posts from this blog

ADFS WAP: How to configure SSO with RDWeb

Image
1.  System Deploy ADFS : th-adfs2012.mfalab3.com ADFS WAP : th-adfs2012wap.mfalab3.com RDWeb : th-rds.mfalab3.com A public IP for ADFS WAP points to ADFS/RDS as well 2.  Setting on ADFS Create a Relying Parth Trust 3.  Setting on ADFS WAP Create WAP Application, Add-WebApplicationProxyApplication -Name 'rdweb' -ExternalUrl 'https://th-rds.mfalab3.com/rdweb/' -BackendServerURL 'https://th-rds.mfalab3.com/rdweb/' -ExternalPreAuthentication ADFS -ADFSRelyingPartyName rdweb1 -ExternalCertificateThumbprint '67D438BDDBB455E53CA83D6F5DEC34CC546F711A' 4.  Setting on RDS Important : Change authentication method to “Windows” https://social.technet.microsoft.com/Forums/office/en-US/999f56fa-a218-41b0-86ee-2845269d93ef/rdweb-authentication?forum=winserverTS 5.  Setting on the Client Computers 6. See how it works
Read more

AAD Connect : How to add an OU to be synced

Image
Here goes to add an OU for AAD Connect sync. 1. Open AAD Connect Synchronization Service Manager 2. Select on-prem AD connector and click Properties 3. Configure Directory Partitions -> Containers 4. Enter Password and click OK 5. Select an OU to be added, "AAD Connect" in this example 6. Create an user for test 7. A new user, "new_aad" created 8. "new_aad" not listed in O365 portal 9. Start AAD sync "Delta" 10. "new_aad" is synced/listed in O365 portal  
Read more

AADConnect PowerShell: Manual operations

Importing PowerShell Module Import-Module ADSync Check current sync schedule Get-ADSyncScheduler To set sync interval to every 3 hours Set-AdSyncScheduler -customizedsycncecleinterval 03:00:00 Start by telling the scheduler to stop its current cycle with the PowerShell cmdlet  Stop-ADSyncSyncCycle To initiate a full sync cycle, run Start-ADSyncSyncCycle -PolicyType Initial Force Synchronisation It could be that you have an urgent change which must be synchronized immediately which is why you need to manually run a cycle. Start-ADSyncSyncCycle -PolicyType Delta To check current sync status Get-ADSyncConnectorRunStatus Example , PS C:\Users\Administrator> Start-ADSyncSyncCycle -PolicyType Delta PS C:\Users\Administrator> Get-ADSyncConnectorRunStatus  RunState ConnectorName  -------- -------------  Busy mfa01.onmicrosoft.com - AAD Manual sync for password $adConnector  = "mfalab3.com" $aadConnector = "mfa01.onmicroso...
Read more