Mandatory MFA enforcement

This page's changes and edits · All guidance changes

Microsoft's edit · 19 Mar 01:36 UTC

Add separate Phase 1 and Phase 2 MFA confirmation sections

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 24c1ba6 · +14 −2 lines · also on GitHub

⋯ 216 unchanged lines

217217

218218 ## Confirm mandatory MFA enforcement

219219

220 +### Confirm Phase 1 enforcement

221 +

222 +To confirm that Phase 1 mandatory MFA is enforced for your tenant:

223 +

224 +1. Sign in to the [Azure portal](https://portal.azure.com) as a [Global Administrator](~/identity/role-based-access-control/permissions-reference.md#global-administrator).

225 +1. Browse to [https://aka.ms/managemfaforazure](https://aka.ms/managemfaforazure).

226 +1. Verify that the **Multifactor authentication (Phase 1)** page shows a banner that confirms enforcement began for your tenant.

227 +

228 + :::image type="content" border="true" source="media/concept-mandatory-multifactor-authentication/phase-1-confirm.png" alt-text="Screenshot of the Multifactor authentication Phase 1 page in the Azure portal, showing that MFA is enforced for all users in the directory.":::

229 +

230 +### Confirm Phase 2 enforcement

231 +

220232 To confirm that Phase 2 mandatory MFA is enforced for your tenant:

221233

222234 1. Sign in to the [Azure portal](https://portal.azure.com) as a [Global Administrator](~/identity/role-based-access-control/permissions-reference.md#global-administrator).

223 −1. Browse to [https://aka.ms/mfaforazure](https://aka.ms/mfaforazure).

235 +1. Browse to [https://aka.ms/postponePhase2MFA](https://aka.ms/postponePhase2MFA).

224236 1. Verify that the **Multifactor authentication (Phase 2)** page shows a banner that confirms enforcement began for your tenant.

225237

226238 :::image type="content" border="true" source="media/concept-mandatory-multifactor-authentication/phase-2-confirm.png" alt-text="Screenshot of the Multifactor authentication Phase 2 page in the Azure portal, showing that MFA enforcement began on or after February 20, 2026.":::

227239

228 −Microsoft Entra ID [sign-in logs](~/identity/monitoring-health/concept-sign-ins.md) show the application that enforced MFA as the source of the MFA requirement.

240 +Microsoft Entra ID [sign-in logs](~/identity/monitoring-health/concept-sign-ins.md) show the application that enforced MFA as the source of the MFA requirement.

229241

230242 ## FAQs

231243

⋯ 82 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 21:50 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.