January
2020
14
Administrators can specify in policy the different authentication
methods available to users in specific situations. For example, they
can require security questions for self-service password recovery,
or a hardware token as a second factor for accessing specific apps.
Azure AD Conditional Access, Microsoft's cloud security policy
engine, lets administrators determine the policies requiring two-
step verification when a specific cloud application is accessed or
when sign-in risk is detected.
Strong authentication is so critical to
security that Microsoft has expanded the
use of MFA across its solutions and services.
All Microsoft customers can enable MFA for free with the
Microsoft Authenticator app, and MFA is now enabled as a
default for all new Azure AD tenants for Microsoft 365, Office 365,
Dynamics, and Azure.
How strong identity management provides a foundation for 'Zero Trust' security