1

I am configuring a 365 tenant with MFA: I understand I will need an Azure AD Premium P1 license for conditional access.

As an MSP, am I able to purchase one Azure AD Premium P1 subscription for the admin account and cover all entities, or will I need the subscription added to all MFA users?

4 Spice ups
2

Every user will need the Subscription for it to work. Or if you have users with Business Premium then you can have Conditional Access

1 Spice up
3

Well actually, P1/P2 is like ATP - it’s either on or off for your entire domain. The licensing agreement requires you to license all users but by having a single license, it’s turned on for the entire tenant. (but not licensed properly)

3 Spice ups
4

Da_Schmoo is 100% correct. Having a single licence will turn it on for everyone but you have to buy for every user for licencing laws.

1 Spice up