Free guide

The Microsoft MFA decision guide

One page. The three ways Microsoft enforces MFA, which one to use, and the legacy setting almost every tenant should switch off. Built from Microsoft's own documentation, current as of June 2026.

What is inside

• Per-user MFA vs Security Defaults vs Conditional Access, side by side
• The 10-second rule for choosing the right one
• What you already own and are probably not using
• The mandatory MFA enforcement nobody opted into