Manage Security Defaults in the Microsoft 365 Admin Center

To safeguard user accounts and reduce cyber risks, Microsoft has implemented essential security policies designed to protect clients by default. For some time now, Microsoft began rolling out Security Defaults for newly created Microsoft 365 tenants across all license tiers. However, as many admins quickly discovered, this policy didn’t fit all use cases—particularly for organizations relying on Basic authentication. The importance of adopting multi-factor authentication (MFA) became more evident, as MFA provides a much-needed security layer to protect against unauthorized access.

Updates for Existing Tenants: Security Defaults for Greater Protection

Microsoft introduced new Security Defaults for existing Microsoft 365 tenants that had yet to enable MFA or set up security defaults, Conditional Access policies, or per-user MFA settings. This update ensures a higher baseline of security, helping organizations keep pace with evolving cyber threats.

The New MFA Configuration in Microsoft 365 Admin Center

Previously, configuring MFA and other security settings required navigating to the Azure Portal—a process that many admins found cumbersome and unintuitive. Recognizing the need for a more streamlined approach, Microsoft introduced an updated MFA management capability directly within the Microsoft 365 Admin Center. This change makes it easier for admins to secure their tenants without needing to rely on the Azure Portal, significantly reducing the time spent on support calls related to MFA setup.

Now, Global Admins can configure MFA, Conditional Access policies, and Security Defaults directly within the Microsoft 365 Admin Center. This flexibility allows administrators to select options based on their organization’s license level, providing a more efficient and user-friendly experience.

Conditional Access in Microsoft 365 Business Premium

As part of a robust security strategy, Conditional Access policies provide enhanced control for organizations needing more granular sign-in security. These policies allow admins to set specific conditions for sign-in events, prompting additional authentication steps before users gain access to applications or services. Conditional Access can be set up quickly using templates, streamlining the process for admins.

Important: Be sure to disable per-user MFA once Conditional Access policies are enabled to avoid inconsistencies in user experience.

Conditional Access is available with a Microsoft Entra ID P1 license, included in Microsoft 365 Business Premium and Microsoft 365 E3. For advanced, risk-based Conditional Access, the Microsoft Entra ID P2 license—also available with Microsoft 365 E5—provides even greater security for managing access to your organization’s resources.