These labs cover MFA in Microsoft Entra ID. Work through them in the order shown. Each one lists its prerequisites, the PowerShell you will run, and how to check the change worked.
New to the topic? Read the lab prerequisites and IAM Foundations first.
Entra ID Security · Lab 02Move Off SMSPlan and validate a controlled migration from SMS to Microsoft Authenticator without locking anyone out.Intermediate75 minEntra ID Security · Lab 03Conditional Access MFAStage, test in report-only and then enforce MFA policies safely, with break-glass exclusions first.Advanced120 minEntra ID Security · Lab 04FIDO2 and PasswordlessRoll out phishing-resistant authentication methods to your highest-risk directory roles.Advanced120 min
About MFA labs
How many MFA labs are there?
There are 3 MFA labs on Identity Bytes Labs, taking about 5.3 hours in total.
Where should I start with MFA?
Start with "Move Off SMS". Plan and validate a controlled migration from SMS to Microsoft Authenticator without locking anyone out.
Do I need a production tenant?
No. Every lab is designed for a free, disposable Microsoft Entra test tenant. Never run lab steps against an environment people depend on.