Security defaults in Entra External ID (EEID)

AI generated

In Entra ID, security defaults are located under the Properties tab.

In Entra ID, security defaults include things like:

• Requiring all users to register for multifactor authentication
• Requiring administrators to use multifactor authentication
• Requiring users to use multifactor authentication when necessary
• Blocking legacy authentication protocols
• Blocking device code flow
• Protecting privileged activities like access to the Azure portal

However, EEID has no such “Properties” tab.

Get Rory Braybrook’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

For EEID, type “Properties” in the Search bar.

You can either use the standard defaults or switch to CA.

Note:

Enabling security defaults in an EEID tenant enforces these MFA rules on your admin accounts.

These rules do not apply to B2C users. Customers sign up or log in to applications using user flows. You must govern MFA requirements separately via user flow configuration or CA.

Also note that in Entra ID, CA requires at minimum a P1 licence.

EEID does not require this for B2C accounts.

All good!