Forum Discussion
Is MFA included in Office 365 Exchange Online Plan 1?
- Mar 15, 2019
I thought that too, I am reasonable sure though at this point that plan does include MFA but you might have to contact Microsoft directly somehow to get a definitive answer. From the product page there is a contact us option, in the UK at least, either via phone or with a form, or you could try asking via support perhaps if you already have Office 365.
Brian ReidThanks for your previous answers. One of our customers currently is planning to migrate from Exchange on-premises to Exchange Online Plan 1 (EXO P1). EXO service comes with SLA. Microsoft publishes SLA for all Online Services here. I was wondering if you could clarify the following questions:
1. What Azure AD edition will customer get after buying EXO P1: AAD FREE or OFFICE 365 APPS?
2. If the answer on first question is AAD FREE, how it correlates with the circumstance that Azure AD comes with no SLA? So it turns out the SLA regulated service depends on service with no SLA?
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing
- cmessina85Jun 11, 2020Copper ContributorHey all,
I am currently trying to get clarification from Microsoft on:
1. Which Office/Microsoft 365 plans include the "Office 365 Apps" Azure AD tier. Depending on which Microsoft KB article I'm looking at, it says it either is included with E3 and E5 only, or E1 and up.
2. Does this Office 365 Apps tier grant users the right to use the per-user MFA (As opposed to just Security Defaults which I'm trying to avoid). Again, not clear and several articles touch on this but conflict and are not explicit.
3. What is the future of per-user MFA? Everywhere per-user is documented, it's referenced that it's not recommended and to use either Security Defaults or pay for P1/P2 and use Conditional Access. It sounds like they are planning to phase per user out but there has been no official word about that.- Brian ReidJun 11, 2020MVPcmessina85 - avoid per user MFA. Go for Security Defaults unless you buy EMS/AAD P1 or 2. The article I posted up near the top of this thread and reposted later on by someone else outlines what you get. Security Defaults are easy, block legacy auth, give 14 days to setup MFA and enforce MFA on risk. Brilliant and simple. If you need rules and conditions, buy AADP1
- ChristianBergstromJun 11, 2020Silver Contributor
Brian Reid Hello again, I appreciate your input on this and it seems as if your replies are reflecting what I've learned reading about it. I'm not about to implement or purchase EXO Plan 1, just want to know more about how the licensing works and what's included. Unfortunately there isn't any official documentation that REALLY explains this properly and I suppose that's why we're having this conversation. We know how it works "under the hood" (technically) but as for the license part that's a bit tricky. I'm trying to get a proper response from Microsoft as another member posted as well, let's see what the outcome is. When previously talking to the support they had no clue so this time I turned to sales and waiting for response.