Microsoft Entra ID

Microsoft Entra ID, MFA and Conditional Access

Stop account takeovers before they start. We set up multi-factor authentication, Conditional Access and single sign-on so the right people get in and everyone else stays out.

A combination padlock resting on a laptop keyboard
A red padlock resting on a green and red backlit keyboard

Identity is your new front door

Most attacks on small and medium businesses start with a stolen password. Microsoft Entra ID, formerly Azure Active Directory, is the identity system behind Microsoft 365. It decides who can sign in, from where and on which device.

We are a Microsoft Partner. We turn on multi-factor authentication, build Conditional Access policies, set up single sign-on for your business apps and move your team towards passwordless sign-in.

See our guides on setting up MFA and passkeys in Microsoft 365, or read about our Essential Eight support.

Talk to our team

What we do with Microsoft Entra ID

The identity controls that matter most for a business your size.

Multi-factor authentication

MFA turned on and enforced for every user, using the strongest methods your plan allows.

Conditional Access

Policies that decide who can sign in, from where and on which devices.

Single sign-on

One sign-in for Microsoft 365 and your business apps, so staff have fewer passwords to manage.

Passwordless sign-in

Passkeys, Windows Hello and the Microsoft Authenticator app to replace passwords where possible.

Roles and admin protection

Admin accounts separated, protected and given only the access they need.

Sign-in monitoring

Risky sign-ins and suspicious activity reviewed so problems are caught early.

Guest and external access

Control how partners and suppliers access your Teams and SharePoint.

Joiners, movers and leavers

Accounts created, changed and closed properly as staff come and go.

How an identity project works

A practical process that protects accounts without slowing people down.

01

Assess

We review your sign-in methods, admin accounts, licences and current risks.

02

Design

We design MFA and Conditional Access policies around how your team really works.

03

Deploy

We pilot, roll out and enforce the policies with minimal disruption.

04

Monitor

We review sign-in activity, tune policies and support your team.

Why businesses choose us for identity security

Practical protection that your staff will not fight.

Security first

Security settings, multi-factor authentication and sensible access controls are part of the design, not an afterthought.

Plain-English advice

No jargon. We explain the options, the trade-offs and our recommendation.

Microsoft Partner

Being a Microsoft Partner gives us access to Microsoft partner support and technical resources when your project needs them.

Ongoing support

After go-live our help desk is there when your team has questions.

Microsoft Entra ID questions

Straight answers to the questions we hear most.

What is Microsoft Entra ID?

Microsoft Entra ID is Microsoft's cloud identity service. It controls who can sign in to Microsoft 365 and connected apps.

Is Entra ID the same as Azure AD?

Yes. Microsoft renamed Azure Active Directory to Microsoft Entra ID. It is the same service with a new name.

What is Conditional Access?

Conditional Access lets you set rules, such as requiring MFA when someone signs in from a new location, or blocking sign-in from devices that are not compliant. It needs Microsoft Entra ID P1, which is included in Microsoft 365 Business Premium.

What is the difference between enabled and enforced MFA?

The two terms describe different MFA states for a user. We explain the difference, and why Conditional Access is usually the better approach, in our guide to enabled and enforced MFA.

Do we need passwordless sign-in?

Not everyone does, but it is the direction of travel. Passkeys and the Authenticator app are harder to phish than passwords. We help you move at a pace that suits your business.

Will MFA slow our staff down?

Only slightly, and modern methods such as number matching in the Authenticator app are quick. We tune policies so people are not prompted more often than they need to be.

Can you set up single sign-on for our other apps?

Yes. Many business apps support single sign-on with Microsoft Entra ID, so staff sign in once and you control access from one place.

Related services

Other ways we can help.

Conditional Access

Smart sign-in rules, MFA and device policies.

Learn more

Microsoft Defender

Protect devices, email and identities from modern threats.

Learn more

Essential Eight

Practical help meeting the ACSC Essential Eight mitigation strategies.

Learn more

Identity Protection

Risk-based sign-in protection and privileged access.

Learn more

Microsoft, Microsoft 365, Microsoft Entra ID, Azure Active Directory and Microsoft Authenticator are trademarks of the Microsoft group of companies. Total Solutions IT is a Microsoft Partner.

Need help securing sign-ins?

Tell us how your team signs in today and we will recommend the simplest way to lock it down.