Office 365: Turn on Multi-factor Authentication

All Global Administrators, and ideally all users should have Multi-factor Authentication (MFA) enabled as soon as possible. MFA allows you to secure your users' access at no additional cost. Once enabled the users will additionally need to provide an access code to sign into Office 365.

Enable Users:

1. in at http://portal.office.com with a Global Admin account.

2. Go to Users and then select Active Users.

3. Select a user that you want to enable for MFA and then under More Settings click Manage multi-factor authentication.

4. Tick all the users that you want to enable for MFA and then under quick steps click on Enable.

5. Click enable multi-factor auth.

Set up the users:

1. At some point Outlook will try to re-authenticate, at which point you will need to re-enter your password.

2. You will then see a message stating that your admin has required that you set up this account for additional security verification. Click Set it up now.

3. Select Authentication phone and then your country code and enter your mobile number.

4. Change the method to Send me a code by text message and click Next.

5. Enter the code sent to you you and then click Finished.

6. Once your applications try to re-authenticate you will be prompted to re-enter your password and then enter the new code sent to your mobile phone for that particular logon.

7. If you are using non-Microsoft software to receive your email (such as Apple Mail) you may need an "Application Password":

   1. Log in at http://portal.office.com with your email address and password (you will also need to enter the code sent via SMS).

   2. Click on the settings cog/gear and select Office 365.

   3. Select Security & privacy on the left-hand side and then Additional security verification.

   4. Click on Update your phone numbers used for account security.

   5. Click on app passwords (it's next to additional security verification).

   6. Click create.

   7. Give the password a name and click next.

   8. Copy the password and paste it into your Apple Mail settings.

   9. Click Close.

8. You can change the method used to perform the additional security:

   1. Log in at http://portal.office.com with your email address and password (you will also need to enter the code sent via SMS).

   2. Click on the settings cog/gear and select Office 365.

   3. Select Security & privacy on the left-hand side and then Additional security verification.

   4. Click on Update your phone numbers used for account security.

   5. Select additional methods from Authentication phone, Office phone, Alternate authentication phone and Authenticator app.