如何为Azure Portal配置MFA？已在AWS控制台完成MFA设置

Absolutely! Azure Portal fully supports Multi-Factor Authentication (MFA), and setting it up is straightforward—similar to how you configured it in AWS. Let me walk you through the step-by-step process to get it set up for your account:

Step 1: Sign in to Azure Portal #

• Navigate to https://portal.azure.com and log in using your existing username and password.

Step 2: Access Your Account Security Settings #

• Once logged in, click your profile icon in the top-right corner of the portal, then select View account from the dropdown menu.
• On the left-hand sidebar, choose Security info—this is where you’ll manage all your MFA and account security methods.

Step 3: Add an MFA Method #

• Click the Add method button near the top of the page.
• From the dropdown list, select Authenticator app (this is the same type of mobile-based MFA you use with AWS) and click Add.

Step 4: Link Your Authenticator App #

• A setup wizard will open—click Next to proceed.
• You’ll see a QR code and a secret key. Grab your mobile device and open your preferred authenticator app (Microsoft Authenticator, Google Authenticator, or the one you use for AWS works fine):
  • For Microsoft Authenticator: Tap the + icon, select Work or school account, then scan the QR code to link the account.
  • For other apps: Tap to add a new account, choose Manual entry, then input the secret key and your Azure account email to complete the link.
• The app will generate a 6-digit verification code. Enter this code into the Azure Portal’s setup window and click Next.
• You’ll get a confirmation that the method was added successfully—click Done to finish this step.

Step 5: (Recommended) Set Up Backup MFA Methods #

• To avoid being locked out if you lose your phone, add backup methods like:
  • Phone: Receive verification codes via SMS or voice call.
  • Security keys: Use a physical hardware key (like YubiKey) for authentication.
• Just repeat Step 3, select your desired backup method, and follow the prompts to configure it.

Step 6: Enforce MFA for Your Organization (If You’re an Admin) #

• If you have Azure Active Directory (Azure AD) admin rights, you can enforce MFA for all users using Conditional Access policies:
  • Go back to the Azure Portal, search for Azure Active Directory in the top search bar.
  • Select Security > Conditional Access > New policy.
  • Name your policy, assign it to the users/groups you want to target, then under the Grant section, select Require multi-factor authentication.
  • Save the policy to activate it.

That’s it! From now on, whenever you sign in to Azure Portal, you’ll be prompted to enter the verification code from your authenticator app (or backup method) in addition to your password—just like your AWS MFA setup.

内容的提问来源于stack exchange，提问作者user7802257