Embed Size (px)
Citation preview
Click to add Information Classification
AZURE-TRAINING.COMATCSLATCSL
Manage Identity and Access
in Azure AD –Part 4Secure Azure Active Directory users with Multi-Factor Authentication
Understanding MFA
Planning MFA Deployment
Configuring MFA Methods
ATCSLATCSL
Understanding MFA
Layer 1Authentication
Layer 2Authentication
ATCSLATCSL
Understanding MFA
1
2
Local AzureMFA Service
Azure AD /On-Prem AD
3
Azure MFAService
ValidationPassed
4
Additional SecurityChallenge Access Granted to
Azure Resource
5
Second LevelChallenge Passed
Verification Steps for Multi-Factor Authentication
ATCSLATCSL
Understanding MFA
Feature Azure AD Free - Security defaults
Azure AD Free - Azure AD Global Administrators
Azure AD Premium P1 or P2
Protect Azure AD tenant admin accounts with MFA
● ● (Azure AD Global Administrator accounts only)
●
Mobile app as a second factor ● ● ●
Phone call as a second factor ● ●
SMS as a second factor ● ●
Admin control over verification methods ● ●
Fraud alert ●
MFA Reports ●
Custom greetings for phone calls ●
Custom caller ID for phone calls ●
Trusted Ips ●
Remember MFA for trusted devices ● ●
MFA for on-premises applications ●
Visit Microsoft document for feature and license comparison
License Based MFA Feature Comparison
ATCSLATCSL
Planning MFA Deployments
Download multi-factor authentication rollout material
Create A Plan To EducateYour Users On Start Date
And Actions to Take
Phase 3
Educate Users
Onboard Additional UsersFor Next Stage AndRe-evaluate System
Phase 4
Onboard Users
Plan Multi-FactorAuthentication And Design
Conditional Policies
Phase 1
Planning
Start With Few PilotUsers And Evaluate
The System for Issues
Phase 2
Pilot Users
AZURE-TRAINING.COMATCSLATCSL
Demo
AZURE-TRAINING.COM
Summary
ATCSLATCSL
Download the training material from – https://azure-training.com
@mstechtrainings
https://www.linkedin.com/in/neeraj-kumar-csm-mcts-mcse/
Secure Azure Active Directory users with Multi-Factor Authentication
Understanding MFA
Planning MFA Deployment
Configuring MFA Methods
