azure-active-directoryamazon-cognitosamlmulti-factor-authenticationmicrosoft365

Microsoft 365 not asking for MFA while doing login

We built Single Sign-on feature through SAML. We are using AWS Cognito as Service Provider and Azure AD as Identity Provider.

In our application, a user clicks on Login with Microsoft button, and we redirect them to the AWS Cognito URL for MS 365 login. The login works successfully and the user is able to access the application.

I have configured an MFA device using this link https://mysignins.microsoft.com/security-info. But while doing SSO login, it's not asking for MFA. How to enforce MFA during login?

Solution

  • I tried to reproduce the same in my environment and got the results like below:

    To setup the MFA in Microsoft 365, Login in to Microsoft 365 admin center with Admin Credentials.

    Go to Users -> Active Users -> Multi-Factor Authentication

    enter image description here

    You can set the MFA for all the users or single user like below:

    enter image description here

    After setting the MFA when I tried to login, I got the MFA prompt successfully like below:

    enter image description here

    In https://mysignins.microsoft.com/security-info page you can select the device for MFA for a user like below:

    enter image description here

    For more in detail, please refer below link:

    How to Set Up MFA in Microsoft 365 by Sherian Batallones