On the Active users page, choose Multi-factor authentication.In the Microsoft 365 admin center, in the left nav choose Users > Active users.If you've previously turned on per-user MFA, you must turn it off before enabling Security defaults. See advanced scenarios with Azure AD Multifactor Authentication and third-party VPN solutions for more information. Advanced: If you have third-party directory services with Active Directory Federation Services (AD FS), set up the Azure MFA Server.If you have Office 2013 clients on Windows devices, turn on Modern Authentication for Office 2013 clients.If you have legacy per-user MFA turned on, Turn off legacy per-user MFA.For more information, see About admin roles. You must be a Global admin to manage MFA.Under Enable Security defaults, select Yes and then Save.Select Azure Active Directory, Properties, Manage Security defaults.Select Show All, then choose the Azure Active Directory Admin Center.Go to the Microsoft 365 admin center at.(Note the Microsoft Authenticator app will work without a mobile or Wi-Fi connection. We recommend you add an additional method to approve sign-ins in case you lose or cannot access your phone. Your web browser will now show this message. Your phone will then get a notification asking you to approve sign-in. Go back to your web browser and click 'Next' You can also control your notifications in your phone settings. Therefore we recommend clicking 'allow' for notifications. This is the quickest way to sign in to your account. The app can send a notification when you sign in asking you to approve it. If you have an iPhone, you will then be asked about notifications. You will then be able to continue the setup. Then enter the code and URL on the next screen. In the app click on 'Or enter code manually'. If you are looking at this on your phone you can click the code and URL to copy them. You will be given a code and URL to copy into the app. On your web browser click on 'Can't scan image?' under the QR code.

If your phone is unable to recognise the QR code on your laptop screen it might be easier to start this process again using the web browser on your phone.

Aka ms mfa setup