# About MFA is an easy way to vasty improve account security. We will be using conditional access to have more complete control over the MFA configuration. I would also recommend using [[Passwordless Authentication]] to improve the user experience. # Microsoft MFA Implementation ## Prerequisite - Disable per-user MFA - Enable modern authentication ## Setup Create [[Microsoft Entra Conditional Access]] policy using the following settings. - Assignments - Include all users - Cloud apps or actions - Include all cloud apps - Conditions - Leave default for MFA on all apps. - Grant - Require MFA authentication