{"id":90680,"date":"2020-03-03T09:00:09","date_gmt":"2020-03-03T17:00:09","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/?p=90680"},"modified":"2023-05-15T23:08:18","modified_gmt":"2023-05-16T06:08:18","slug":"single-sign-on-sso-multi-factor-authentication-mfa","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/","title":{"rendered":"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)"},"content":{"rendered":"

With Multi-Factor Authentication (MFA) and single sign-on (SSO) being a few of the most effective countermeasures against modern threats, organizations should consider a Cloud Identity as a Service (IDaaS), and MFA solution, like Azure Active Directory (AD).<\/p>\n

Here are seven benefits:<\/p>\n

    \n
  1. Azure AD is simple to set up and works with almost everything, meaning once identity is in the cloud. It may be accessed by any entity that requires access and used for all on-premises and cloud applications. Azure AD MFA\u2014using the Microsoft Authenticator app\u2014is one the easiest MFA solutions for users to adopt and one of the fastest ways to take a passwordless approach.<\/li>\n<\/ol>\n

    To learn more, read Microsoft Recommending Non-Expiring Passwords to Office 365 Customers<\/a>.<\/p>\n

      \n
    1. SSO reduces the threat of untimely termination\/identity decommissioning by decreasing “identity sprawl,” so you can have one identity in multiple applications per user.<\/li>\n<\/ol>\n

      To learn more, read Azure AD Seamless Single Sign-on<\/a>.<\/p>\n

        \n
      1. A single, unified MFA reduces the success of phishing attacks due to password reuse or social engineering with the enforcement of MFA.<\/li>\n<\/ol>\n

        To learn more, read Email Phishing Protection Guide\u2014Part 3: Enable Multi Factor Authentication (MFA)<\/a>.<\/p>\n

          \n
        1. The SSO\/IDaaS approach paves the way for eliminating basic authentication and password spray attacks.<\/li>\n<\/ol>\n

          To learn more, read Your Pa$$word doesn’t matter<\/a>.<\/p>\n

            \n
          1. MFA and SSO increases user satisfaction\u2014making the CISO a business enabler rather than a productivity and collaboration roadblock.<\/li>\n<\/ol>\n

            To learn more, read Go passwordless to strengthen security and reduce costs<\/a>.<\/p>\n

              \n
            1. Azure AD is more available than on-premises AD FS and other IDaaS. Microsoft guarantees 99.9 percent uptime\u2014a difficult SLA to achieve on-premises.<\/li>\n<\/ol>\n

              For details, see SLA for Azure Active Directory<\/a>.<\/p>\n

                \n
              1. Azure AD Conditional Access enforces the Zero Trust model<\/a> for all authentications.<\/li>\n<\/ol>\n

                To learn more, visit Achieve Zero Trust with Azure AD conditional access<\/a>.<\/p>\n

                Also, bookmark the Security blog<\/a> to keep up with our expert coverage on security matters. Follow us at @MSFTSecurity<\/a> for the latest news and updates on cybersecurity.<\/p>\n","protected":false},"excerpt":{"rendered":"

                Organizations should consider a Cloud Identity as a Service (IDaaS), and MFA solution, like Azure Active Directory (Azure AD) for effective countermeasures against modern threats.<\/p>\n","protected":false},"author":96,"featured_media":90682,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"content-type":[3662],"topic":[3671,3678],"products":[3702,3703],"threat-intelligence":[],"tags":[],"coauthors":[2229],"class_list":["post-90680","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-news","topic-email-security","topic-multifactor-authentication","products-microsoft-entra","products-microsoft-entra-id"],"yoast_head":"\nQuick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)<\/title>\n<meta name=\"description\" content=\"Organizations should consider a Cloud Identity as a Service (IDaaS), and MFA solution, like Azure Active Directory (Azure AD) for effective countermeasures against modern threats.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-video-preview:-1, noimageindex\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)\" \/>\n<meta property=\"og:description\" content=\"Organizations should consider a Cloud Identity as a Service (IDaaS), and MFA solution, like Azure Active Directory (Azure AD) for effective countermeasures against modern threats.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-03T17:00:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-16T06:08:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"1333\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Joseph Davis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joseph Davis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/joseph-davis\/\",\"@type\":\"Person\",\"@name\":\"Joseph Davis\"}],\"headline\":\"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)\",\"datePublished\":\"2020-03-03T17:00:09+00:00\",\"dateModified\":\"2023-05-16T06:08:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/\"},\"wordCount\":333,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/\",\"name\":\"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg\",\"datePublished\":\"2020-03-03T17:00:09+00:00\",\"dateModified\":\"2023-05-16T06:08:18+00:00\",\"description\":\"Organizations should consider a Cloud Identity as a Service (IDaaS), and MFA solution, like Azure Active Directory (Azure AD) for effective countermeasures against modern threats.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg\",\"width\":2000,\"height\":1333},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"name\":\"Microsoft Security Blog\",\"description\":\"Expert coverage of cybersecurity topics\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\",\"name\":\"Microsoft Security Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Security Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)","description":"Organizations should consider a Cloud Identity as a Service (IDaaS), and MFA solution, like Azure Active Directory (Azure AD) for effective countermeasures against modern threats.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-video-preview":"max-video-preview:-1","imageindex":"noimageindex"},"canonical":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/","og_locale":"en_US","og_type":"article","og_title":"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)","og_description":"Organizations should consider a Cloud Identity as a Service (IDaaS), and MFA solution, like Azure Active Directory (Azure AD) for effective countermeasures against modern threats.","og_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/","og_site_name":"Microsoft Security Blog","article_published_time":"2020-03-03T17:00:09+00:00","article_modified_time":"2023-05-16T06:08:18+00:00","og_image":[{"width":2000,"height":1333,"url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg","type":"image\/jpeg"}],"author":"Joseph Davis","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg","twitter_misc":{"Written by":"Joseph Davis","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/joseph-davis\/","@type":"Person","@name":"Joseph Davis"}],"headline":"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)","datePublished":"2020-03-03T17:00:09+00:00","dateModified":"2023-05-16T06:08:18+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/"},"wordCount":333,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/","name":"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg","datePublished":"2020-03-03T17:00:09+00:00","dateModified":"2023-05-16T06:08:18+00:00","description":"Organizations should consider a Cloud Identity as a Service (IDaaS), and MFA solution, like Azure Active Directory (Azure AD) for effective countermeasures against modern threats.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2020\/03\/Quick-Wins-full-size.jpg","width":2000,"height":1333},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/03\/03\/single-sign-on-sso-multi-factor-authentication-mfa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/"},{"@type":"ListItem","position":2,"name":"Quick wins\u2014single sign-on (SSO) and Multi-Factor Authentication (MFA)"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","name":"Microsoft Security Blog","description":"Expert coverage of cybersecurity topics","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization","name":"Microsoft Security Blog","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","width":512,"height":512,"caption":"Microsoft Security Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/"}}]}},"msxcm_display_generated_audio":false,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Security Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/90680"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/users\/96"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/comments?post=90680"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/90680\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media\/90682"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media?parent=90680"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/content-type?post=90680"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/topic?post=90680"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/products?post=90680"},{"taxonomy":"threat-intelligence","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/threat-intelligence?post=90680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/tags?post=90680"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/coauthors?post=90680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}