Multi Factor Authentication In Microsoft Azure Updated

# Project-1 Azure Use Case

Azure Security Service

Case Study

An on-premises Customer wants to Adopt Cloud SaaS Services. organization has on-premesis active Directory and they want to start using Software as a Services,they want to use a single identity for simplify provisioning and deprovisioning and better security. they have users anf groups in their active directory. they actually want to remove any reliance on their on-premises active directory domain services.

1. They want use a single identify for simplified provisioning and deprovisioning and better security.
2. They want to use Identity Management.

Solution

1.Multi Factor Authentication

The Customer has an on premises Active directory.Now the first Thing That has to happen is to implement Azure Active Directory(AAD). So Azure Active directory(AAD) connect is implemented which is then replicates the users into Azure AD.

if we use Azure AD Premium P1 ,all the users get MFA using their phone

Azure AD Premium P1 :- we can use Azure AD Conditional Access to prompt users for multi-factor authentication during certain scenarios or events to fit your business requirements.

2.Limit Higher Privilages

Azure AD Premium P2:-Provides the strongest security position and improved user experience. Adds risk-based Conditional Access to the Azure AD Premium P1 features that adapts to user's patterns and minimizes multi-factor authentication prompts.

Have a look into below link to know about MFA

Available versions of Azure AD Multi-Factor Authentication

Steps to implement MFA in Azure AD

1. In azure Portal,click on Azure Active Directory
2. Click on Users tab. All user list will appear
3. Click on Multi-factor authentication at the top. After you click it will take to another website in new window.

4. A new window will open for multi-factor authentication.
5. At top, there are two section ‘Users’ and ‘Service Settings’. By default, User section will open.
6. Click on ‘Service Settings’. Here you can see the available option for verification and modify the options as per your choice and need.

7. select the user from User tab for which we need to enable MFA and click ‘Enable’,
8. A popup window will appear. Click on ‘enable multi-factor authentication’
9. Close the window. we can see that MFA status has been changed to ‘Enabled’ now. Now try to login to Azure Portal with that user login. After entering login and password, another screen will come for MFA. Click Next
10. Select the option for verification. we can choose the 'Authentication Phone' or 'Authentication Email'as default option. Select your country name, enter your phone number for Authentication Phone Option and click ‘Next’.

if we choose Authentication option

11. i.Enter the verification that you will receive on your phone number and click Verify.
    ii.Click ‘Done’
    iii.Now, the next time when we login to the Azure portal we need to provide extra authorization