What are Security Defaults in Azure AD?

Security Defaults in Azure AD are pre-configured settings provided by Microsoft to enforce basic security best practices in your tenant. Designed to protect organizations from common threats like password spray, phishing, and compromised accounts, these defaults enable essential security features without requiring complex configurations.

Key Features of Security Defaults

1. Multi-Factor Authentication (MFA): Enforces MFA for all users to secure account access.
2. Blocking Legacy Authentication: Disables older protocols that don't support MFA, like POP, IMAP, and SMTP.
3. Admin Protection: Ensures privileged roles, like Global Administrators, must use MFA.
4. User Protection:Prompts all users to register for MFA during their next sign-in.

Why Use Security Defaults?

• Simplified Security: Quickly enable baseline security features with minimal setup.
• Compliance Readiness: Meet basic regulatory requirements for identity protection.
• Reduced Risk: Protect against identity-based attacks like brute force and phishing.

Limitations of Security Defaults

1. Cannot customize policies (use Conditional Access for advanced configurations).
2. May not be ideal for organizations with specific security or compliance needs.

How to Enable or Disable Security Defaults

Admins can manage Security Defaults in the Azure AD Admin Center:

1. Navigate to Azure Active Directory > Properties > Manage Security Defaults.
2. Toggle the setting On or Off.

Security Defaults in Azure AD offer an effortless way to enhance your organization’s security posture and protect against common identity threats.

Explore More

• Turning On Security Defaults in Azure AD
• Turning On Security Defaults Using Graph PowerShell