Ensure multifactor authentication is enabled for all users

Why This Matter

Without multifactor authentication, user accounts are protected by passwords alone. Passwords are vulnerable to phishing, credential theft, and brute force attacks. Enforcing MFA dramatically reduces the risk of unauthorized access by requiring a second verification factor.

What Aether365 Checks

This check verifies that a Conditional Access policy requiring multifactor authentication is applied to all users in your Microsoft Entra ID tenant. It appears in the Aether365 dashboard under the entra-id checks section.

How to Fix

To enable MFA for all users through Conditional Access:

Microsoft references

• Policy all users mfa strength
• Security emergency access
• Troubleshoot conditional access what if
• Plan conditional access
• Security controls v3 identity management