-->
To protect user accounts in your organization, multi-factor authentication should be used. This feature is especially important for accounts that have privileged access to resources. Basic multi-factor authentication features are available to Microsoft 365 and Azure Active Directory (Azure AD) administrators for no extra cost. If you want to upgrade the features for your admins or extend multi-factor authentication to the rest of your users, you can purchase Azure AD Multi-Factor Authentication in several ways.
F3 plans include 2GB OneDrive storage per user. F3 includes consumption only, no publish/share. Sway is not currently available for Government Community Cloud (GCC) customers and customers in certain geographies at this time. Some legacy Office 365 plans that are no longer in market as of August 2015 may also not have access to Sway. @DanCooperstock This post is about the M365 team dropping support for IE from its web sites. M365 team is under the Office division, it has no say over how long IE itself gonna be supported (that is the job of the Windows team). This post affirms that IE would continue to be supported for the duration of Windows lifecycle. Find the right Microsoft 365 Family or Personal plan for all your devices. Includes AI-powered Office apps, 1 TB of cloud storage, and premium mobile features. This plan works with Office 2019, Office 2016, Office 2013, and Office 2011 for Mac. Previous versions of Office, such as Office 2010 and Office 2007 may work with Microsoft 365 with reduced functionality. This compatibility with Office does not include the Office 365 F3 plans. After your 1-month free trial, you will be charged the. This new plan has new value specifically for Microsoft’s Firstline Worker plans. It will extend the Microsoft 365 licensing line-up and will slot below Microsoft’s existing Firstline plan. Therefore, it will inherit the Microsoft 365 F1 name, and the previously known as Microsoft 365 F1 plan will be renamed to Microsoft 365 F3.
Important
This article details the different ways that Azure AD Multi-Factor Authentication can be licensed and used. For specific details about pricing and billing, see the Azure AD Multi-Factor Authentication pricing page.
Available versions of Azure AD Multi-Factor Authentication
Azure AD Multi-Factor Authentication can be used, and licensed, in a few different ways depending on your organization's needs. You may already be entitled to use Azure AD Multi-Factor Authentication depending on the Azure AD, EMS, or Microsoft 365 license you currently have. The following table details the different ways to get Azure AD Multi-Factor Authentication and some of the features and use cases for each.
| If you're a user of | Capabilities and use cases |
|---|---|
| Microsoft 365 Business Premium and EMS or Microsoft 365 E3 and E5 | EMS E3, Microsoft 365 E3, and Microsoft 365 Business Premium includes Azure AD Premium P1. EMS E5 or Microsoft 365 E5 includes Azure AD Premium P2. You can use the same Conditional Access features noted in the following sections to provide multi-factor authentication to users. |
| Azure AD Premium P1 | You can use Azure AD Conditional Access to prompt users for multi-factor authentication during certain scenarios or events to fit your business requirements. |
| Azure AD Premium P2 | Provides the strongest security position and improved user experience. Adds risk-based Conditional Access to the Azure AD Premium P1 features that adapts to user's patterns and minimizes multi-factor authentication prompts. |
| All Microsoft 365 plans | Azure AD Multi-Factor Authentication can be enabled on a per-user basis, or enabled or disabled for all users using security defaults. Management of Azure AD Multi-Factor Authentication is through the Microsoft 365 portal. For an improved user experience, upgrade to Azure AD Premium P1 or P2 and use Conditional Access. For more information, see secure Microsoft 365 resources with multi-factor authentication. |
| Azure AD free | You can use security defaults to enable multi-factor authentication for all users. You don't have granular control of enabled users or scenarios, but it does provide that additional security step. Even when security defaults aren't used to enable multi-factor authentication for everyone, users assigned the Azure AD Global Administrator role can be configured to use multi-factor authentication. This feature of the free tier makes sure the critical administrator accounts are protected by multi-factor authentication. |
Feature comparison of versions
The following table provides a list of the features that are available in the various versions of Azure AD Multi-Factor Authentication. Plan out your needs for securing user authentication, then determine which approach meets those requirements. For example, although Azure AD Free provides security defaults that provide Azure AD Multi-Factor Authentication, only the mobile authenticator app can be used for the authentication prompt, not a phone call or SMS. This approach may be a limitation if you can't ensure the mobile authentication app is installed on a user's personal device.
| Feature | Azure AD Free - Security defaults | Azure AD Free - Azure AD Global Administrators | Microsoft 365 apps | Azure AD Premium P1 or P2 |
|---|---|---|---|---|
| Protect Azure AD tenant admin accounts with MFA | ● | ● (Azure AD Global Administrator accounts only) | ● | ● |
| Mobile app as a second factor | ● | ● | ● | ● |
| Phone call as a second factor | ● | ● | ● | |
| SMS as a second factor | ● | ● | ● | |
| Admin control over verification methods | ● | ● | ● | |
| Fraud alert | ● | |||
| MFA Reports | ● | |||
| Custom greetings for phone calls | ● | |||
| Custom caller ID for phone calls | ● | |||
| Trusted IPs | ● | |||
| Remember MFA for trusted devices | ● | ● | ● | |
| MFA for on-premises applications | ● |
Purchase and enable Azure AD Multi-Factor Authentication
To use Azure AD Multi-Factor Authentication, register for or purchase an eligible Azure AD tier. Azure AD comes in four editions — Free, Microsoft 365 apps, Premium P1, and Premium P2.
The Free edition is included with an Azure subscription. See the section below for information on how to use security defaults or protect accounts with the Azure AD Global Administrator role.
The Azure AD Premium editions are available through your Microsoft representative, the Open Volume License Program, and the Cloud Solution Providers program. Azure and Microsoft 365 subscribers can also buy Azure Active Directory Premium P1 and P2 online. Sign in to purchase.
After you have purchased the required Azure AD tier, plan and deploy Azure AD Multi-Factor Authentication.
Azure AD Free tier
All users in an Azure AD Free tenant can use Azure AD Multi-Factor Authentication through the use of security defaults. The mobile authentication app is the only method that can be used for Azure AD Multi-Factor Authentication when using Azure AD Free security defaults.
If you don't want to enable Azure AD Multi-Factor Authentication for all users, you can instead choose to only protect user accounts with the Azure AD Global Administrator role. This approach provides additional authentication prompts for critical administrator accounts. You enable Azure AD Multi-Factor Authentication in one of the following ways, depending on the type of account you use:
- If you use a Microsoft Account, register for multi-factor authentication.
- If you aren't using a Microsoft Account, turn on multi-factor authentication for a user or group in Azure AD.
Microsoft 365 For Business | Microsoft
Next steps
What Is Included In M365 A3
- For more information on costs, see Azure AD Multi-Factor Authentication pricing.
MS Office 365 Government Plans Comparison
Office 365 Government plans are tailor-made to serve the unique requirements of US government agencies and associated contractors. You can now meet the stringent U.S compliance and security needs with the unique capabilities of Office 365 services in the government cloud community.
- ✓ Government approved CSP
- ✓ 24/7 expert support
- ✓ Talk to Microsoft-certified experts
MS Office 365 | MS Office 365 | MS Office 365 | MS Office 365 | ||
| Applications | |||||
| MS Word, OneNote, Excel, PowerPoint | Web based | Web based | Desktop supported | Desktop supported | |
| Access | PC only | PC only | |||
| Storage & Email | |||||
| Exchange | 2 GB mailbox with calendar and contacts | 50 GB mailbox with calendar and contacts | 100 GB mailbox with calendar and contacts | 100 GB mailbox with calendar and contacts | |
| OneDrive | 2 GB per user | 1 TB per user | Unlimited* | Unlimited* | |
| Collaboration Features | |||||
| Teams | |||||
| Audio conferencing, voicemail & Cloud PBX | |||||
| SharePoint | |||||
| Safety, Security & Compliance | |||||
| eDiscovery capability with in-place search, export, and hold | |||||
| Encryption and do-not-follow features | |||||
| Advanced eDiscovery with integrated Predictive coding and analytics | |||||
| Advanced protection against phishing and malware attacks | |||||
| Management & Analytics Capabilities | |||||
| Office Graph | |||||
| Business Intelligence | |||||
| MyAnalytics & Power BI Pro | |||||
| App management with Group Policy, Telemetry, Shared Computer Activation | |||||
| $4.00 user/monthBased on Annual Commitment Buy Now | $8.00 user/monthBased on Annual Commitment Buy Now | $20.00 user/monthBased on Annual Commitment Buy Now | $35.00 user/monthBased on Annual Commitment Buy Now | ||
*Unlimited cloud storage for G3 and G5 plans for five or more users, or else 1 TB/user. Initial storage 1 TB/user, which can be later increased to 5 TB/user. Request additional storage by contacting us.