However, you need to make sure your Office 365 subscription is enabled for ADAL, or modern authentication.

This means that app passwords aren't required for Office 2016 clients. On the bottom of the page, choose Manage Security defaults, and in the Enable Security defaults pane, set Enable Security defaults toggle to Yes.Įnable Modern authentication for your organizationĪll Office 2016 client applications support MFA through the use of the Active Directory Authentication Library (ADAL). Go to Azure Active Directory Properties page. On the Azure portal Conditional Access - Policies page, choose each Baseline policy that is On, and set them to Off. Under Make sign-in more secure, select Manage. Next to Sign-in and security, under Make sign-in more secure, select View. Move from baseline policies to security defaults Sign in to admin center with your Global admin credentials.Īt the bottom of the page, choose Manage Security defaults.Ĭhoose Yes to enable security defaults and No to disable security defaults. To use conditional access policies, you need to make sure modern authentication is enabled.

However, if you have Microsoft 365 Business or your subscription includes Azure Active Directory Premium 1, or Azure Active Directory Premium 2, you can also set up conditional access policies. If you have previously set up MFA with baseline policies, you must turn them off and turn on security defaults (recommended). Note: You must be an Office 365 global admin to set up or modify multi-factor authentication.

Setup mfa office 365