A Microsoft Entra ID Protection policy that asks targeted users to set up MFA the next time they sign in interactively, allowing 14 days before it is enforced. It requires P2 or Microsoft Entra Suite, and it does not demand MFA on every sign-in.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains MFA registration policy in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra ID Protection
Uses risk scores on users and sign-ins to spot, look into and fix threats to identities. Policies that respond to that risk live in Conditional Access, and a Microsoft Entra ID P2 licence is required.
- Exclusions
Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.
- Set
Secret permission in Key Vault for writing secrets; some older material refers to it as Create.
- MFA
Multifactor authentication: asking for another factor on top of a password at sign-in, usually required by a Conditional Access grant control.
- NEXT
Restricted to visual calculations, this DAX function reads the value one step further along an axis of the visual matrix; writing OFFSET with 1 gives the same result.
- Microsoft Entra Suite
One licence covering the premium features of five products: Private Access, Internet Access, ID Governance, ID Protection and Verified ID. Microsoft Entra ID P1 is a prerequisite, and Microsoft 365 E7 includes it.
Related terms
- Entra ID Protection
Calculates sign-in risk and user risk and enforces the MFA registration policy; it comes with Entra ID P2.