Two-factor authentication
A time-based code from an authenticator app, in addition to your password.
Checking…
Security key or passkey
A hardware key, or the fingerprint or face unlock built into this device. It counts as your second factor on its own, so you do not also need an authenticator app.
Checking…
Require it across this tenant
Everyone signs in with a second factor. Members who have not enrolled are asked to set one up at their next sign-in rather than being locked out.
Currently optional
Or require it of particular roles
Useful when the people who can change things should carry a second factor and the people who can only read need not. Requiring it of everyone above covers every role, whatever is selected here.