What is another requirement enforced when security defaults are enabled for Azure AD?

When security defaults are enabled in Azure AD, requiring Azure Multi-Factor Authentication (MFA) registration for all users is an essential security measure. Security defaults aim to protect organizations by enforcing a basic level of security, which includes the implementation of MFA.

This requirement helps to ensure that user accounts are more secure by adding an extra layer of verification beyond just a username and password. It mitigates risks such as credential theft, as an attacker would need not only the password but also the second factor to gain access to the account.

Organizations that enable security defaults benefit from this built-in protection, making it a recommended approach for enhancing the overall security posture, especially for organizations that may not have extensive security measures in place.