MFA technology adds a second factor during authorization. Using MFA, users will have to use an additional authorization element, such as receiving a code via SMS, phone call, or confirmation with the help of a mobile application. This technology significantly reduces the possibility of illegitimate use of the account; even if the attackers manage to learn the username and password, they will not be able to bypass the second confirmation factor.

We strongly recommend setting up this feature for all accounts.

IT Partner responsibilities #

1. Provide informational letters for users
2. Analyze applications that use AD authorization and their ability to use MFA
3. Enable policies of mandatory MFA usage
4. Monitor MFA implementation results

Client responsibilities #

1. Coordinate Client resources and staff schedules
2. Provide a dedicated point of contact responsible for working with IT Partner
3. Employees have to complete the MFA setup for their accounts on their own
4. Coordinate any outside vendor resources and schedules
5. Configure all network equipment, such as load balancers, routers, firewalls, and switches
6. Review and approve engagement deliverables in a timely manner

Additional cost items not provided by the project #

1. Informing users about upcoming changes
2. Customer team training (could be added as an additional service)
3. Desktop software settings

Upon completion of the project, we will provide a project closeout report. This document will indicate the final project status, including acceptance criteria matching, outstanding issues (if any), and the final budget. If you require more extensive documentation, it can be provided for an additional fee. 

Prerequisites #

1. Any Microsoft 365 service
2. Entra ID Premium or another subscription with the ability to use MFA

Plan #

The plan may vary depending on your needs.

1. Kickoff meeting
2. Gathering information about applications that use Entra ID authorization
3. Informing users
4. Enabling the MFA usage policy
5. Completing the MFA setup by users for their accounts
6. Verification and fixing issues, if any

Success Criteria #

1. MFA policy is enabled
2. Users have completed a second authorization factor setup for their accounts