Daniel Westerdale

Azure multi-factor authentication (MFA) can be enabled per user or for all user logins through Security Defaults:

1. In your Office 365 Admin Center, click on the left-hand navigation link: Active Users or go directly via the link below

   https://admin.microsoft.com/Adminportal/Home/#users

2. Click on the Multi-factor Authentication Option

   

3. Enable or disable MFA for each user as desired

   

4. Enable Security Defaults

   Alternatively, Microsoft offers Enabling Security Defaults: a streamlined approach for enabling MFA for all users and ensuring MFA is enforced for all administrators. This is directed at smaller organisations who want MFA set on all admin accounts, or don’t want the expense of purchasing additional Azure AD P1 or P2 licenses to enable MFA through conditional access.
   
   Navigate to the properties option in the Azure AD admin portal. then, click on the Manage Security Defaults link at the bottom of the screen.