Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management

Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management

Written By Anoop C Nair
Last Updated October 28, 2024
Posted In Entra
SHARE

Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management! Microsoft made it easier to set up and manage per-user multifactor authentication (MFA) by moving it to a single place called Microsoft Entra ID.

Administrators can now handle all user MFA settings directly within Microsoft Entra ID instead of needing separate settings, making the process simpler and faster. Per-user Multifactor Authentication (MFA) is a security feature that enables organizations to require additional authentication methods beyond just a password for specific users.

In a per-user MFA setup, administrators can choose which individual users must use MFA rather than applying MFA across all users by default. This flexibility allows organizations to apply extra security selectively, such as for users with access to sensitive information.

In this post, you will find all the details on Microsoft’s recent change to per-user multifactor authentication (MFA). Microsoft has moved per-user MFA into Microsoft Entra ID, making it easier for IT admins to manage it from one central place.

Patch My PC

What is Changing with Per-user Multifactor Authentication (MFA)?


Microsoft has moved per-user MFA management into Microsoft Entra ID. Now, all settings for per-user MFA can be managed directly within the Entra admin center, making it easier for administrators to control and secure specific user accounts.

What is the Advantage of this Update?


This update was introduced to simplify the management process and provide a centralized location for MFA settings. It allows for faster and more consistent control over security for individual users.

Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management

Sign in to the Microsoft Entra admin center to access the new per-user multifactor authentication (MFA) settings in Microsoft Entra ID. Once logged in, go to Identity and select Users, followed by All Users. From here, you will find the Per-user MFA option on the three dots (shown in the screenshot below), allowing you to manage MFA settings for individual users directly within Entra ID.

  • This simplified process enables easier access and control over user-specific MFA settings.
Note
Please update your documentation to include the new steps for accessing and managing per-user multifactor authentication in Microsoft Entra ID
Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management – Table 1
Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management - Fig.1
Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management – Fig.1

Multifactor authentication (MFA) is critical for protecting your users and your organization’s data. Microsoft recommends using adaptive conditional access policies as the best approach to MFA. With adaptive Conditional Access, you can set rules based on user behavior or location to decide when MFA is needed, adding a flexible layer of security without making it too complicated for users to access their accounts.

Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management - Fig.2
Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management – Fig.2

Per User Multifactor Authentication

Per-user multifactor Authentication (MFA) is a security feature that lets administrators enable extra layers of protection. Rather than applying MFA to everyone in an organization, per-user MFA allows admins to set up this added security only for specific users.

Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management - Fig.3 - Creds to MS
Microsoft Moves Per-User Multifactor Authentication to Entra ID for Easier Management – Fig.3 – Creds to MS

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Resources

Enable per-user multifactor authentication – Microsoft Entra ID | Microsoft Learn

Author

Anoop C Nair has been Microsoft MVP from 2015 onwards for ten consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Entra

Entra ID SSPR Improves Security with Registered Authentication Methods | Impact on Unregistered Users Starting September 2026

Key Takeaway Entra ID SSPR Improves Security with Registered Authentication Methods! Starting September 7, 2026, Microsoft Entra ID Self-Service Password Reset (SSPR) will require users to verify their identity using explicitly registered authentication methods. Directory-sourced contact information, such as mobile phone numbers, business phone numbers, and alternate email addresses, will no longer be accepted for […]

AC Anoop C Nair 4 min read
Entra

Explicit Forward Proxy in Microsoft Entra Internet Access Helps Secure VDI BYOD and Clientless Browsing

Key Takeaways Explicit Forward Proxy in Microsoft Entra Internet Access! This feature allows organizations to use secure web and AI gateway capabilities without deploying the Global Secure Access client, making it useful for browser-based and lightly managed environments. It works with browsers that support Proxy Auto-Configuration (PAC) files. Since this is a prerelease feature, Microsoft […]

AC Anoop C Nair 3 min read
Cloud

Microsoft Enables Entra Writeback for Cloud-Managed Remote Mailboxes to Help Remove Last Exchange Server

Key Takeaways: Let’s discuss about Microsoft Unlocks Entra Writeback for Cloud-Managed Remote Mailboxes to Help Remove Last Exchange Server. For customers with no remaining dependency on their last Exchange Server, a guide for decommissioning your last Exchange Server. Microsoft announced the Public Preview of Cloud-Managed Remote Mailboxes. Microsoft is excited to share these two new milestones […]

AC Anoop C Nair 3 min read