- [Instructor] Let's go ahead and configure
multi factor authentication for individual users
in Azure Active Directory.
And you'll do so by selecting users,
and then multi factor authentication,
and this will open a new window for you.
Simply select the user or users
that you want MFA applied to,
and then select enable, and enable one more time.
Once enabled we can enforce that the user create
app passwords to use non-browser apps.
This will typically affect legacy apps,
such as Outlook 2010 and Apple Mail,
which did not support MFA, and you can go ahead
and enforce multi factor authentication.
We can also manage the user settings from here.
We can require that the user provide
contact methods once again, we can delete all existing
app password generated by the selected users,
and finally we can restore multi factor authentication
on all remembered devices.
A classic example of why we would implement
restoring multi factor authentication
on all remembered devices is if the user
has lost their device.
Once you've selected your settings,
you can go ahead and click save.
You will find the providers under MFA server
in Azure Active Directory, and then select providers.
As you can see, I do not have any providers
and that's because I already used
the Azure Active Directory Premium SKU.
If you do not have that SKU, you can go ahead
and select add, add the name of the provider,
and then you need to select your usage model,
and you'll notice that we have two options here,
we have per enabled user, or per authentication.
Typically per authentication is used
in consumer facing applications,
whereas per enabled user would be used
when you need to provide authentication
for only some of your users.
Next you could go ahead and select your subscription,
and then you could link it to a directory.
One thing to keep in mind here
is you cannot change the usage model,
this is set in stone.
If you need to change from per authentication
to per enabled user, you will need to delete
the provider and recreate it.
As already mentioned, I already have
multi factor authentication enabled
with my subscription, therefore I'm not
going to add the provider.
And that's all there is to setting a provider
to enable MFA to your tenant.