What does the email I received from Microsoft that security defaults will be enabled in my tenant mean?

Hello,

The email you received from Microsoft indicates that security defaults will be enabled in your tenant, which includes requiring multifactor authentication (MFA) for all users and administrators. However, since you are already using a third-party IDP for MFA, you can disable security defaults to avoid having another layer of MFA for your Microsoft logins.

If your existing MFA solution meets your security needs, you might consider discussing with your IT team whether to disable Microsoft’s security defaults after they are enabled. However, be aware that this could leave your organization without some of the protections that Microsoft provides.

For more details, please refer to the documents:

Guideline: Partner: CSP: Security Defaults Enablement

Turn on MFA by using security defaults or Conditional Access - Microsoft 365 Business Premium | Microsoft Learn

disable Security Defaults: Providing a default level of security in Microsoft Entra ID - Microsoft Entra | Microsoft Learn

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.