You enable or disable security defaults from the Properties pane for Azure Active Directory (Azure AD) in the Azure portal. If your subscription is new, Security defaults might already be turned on for you automatically.

For more information, see What are security defaults?

On the multi-factor authentication page, select each user and set their Multi-Factor auth status to Disabled.įor most organizations, Security defaults offer a good level of additional sign-in security.

On the Active users page, choose Multi-factor authentication.

In the Microsoft 365 admin center, in the left nav choose Users > Active users.

If you've previously turned on per-user MFA, you must turn it off before enabling Security defaults. See advanced scenarios with Azure AD Multifactor Authentication and third-party VPN solutions for more information.

Advanced: If you have third-party directory services with Active Directory Federation Services (AD FS), set up the Azure MFA Server.

If you have Office 2013 clients on Windows devices, turn on Modern Authentication for Office 2013 clients.

If you have legacy per-user MFA turned on, Turn off legacy per-user MFA.

For more information, see About admin roles.

You must be a Global admin to manage MFA.

Under Enable Security defaults, select Yes and then Save.

Select Azure Active Directory, Properties, Manage Security defaults.Select Show All, then choose the Azure Active Directory Admin Center.

Go to the Microsoft 365 admin center at.

Check modern authentication office 365