
Active Directory Administration Cookbook, Second Edition
By :

Azure Identity Protection offers additional protection to organizations that worry about password breaches. This recipe shows how to configure an MFA registration policy.
To complete this recipe, sign in to Azure AD with an account that has the Global administrator role assigned to it. If the organization uses the Azure AD PIM feature, activate the Global administrator role in advance.
The Azure AD Identity Protection functionality requires Azure AD Premium P2 licenses or Microsoft licenses that include the P2 license, such as EMS E5, EMS A5, Microsoft 365 E5, Microsoft 365 Information Protection and Compliance, or Microsoft 365 Business Premium licenses.
Perform the following steps: