Automated investigation and response are not an identity management feature; it’s a tool that automates investigation and remediation of well-known attack threats.

When planning for identity governance, you should determine how soon a user has access to the resources they need and how their access changes over time.

You should first categorize users so you can secure access with controls that ensure strong assurances of identity and access from safe devices.

Legacy authentication does not support multi-factor authentication.

To enforce MFA, create a Conditional Access policy and select Require multi-factor authentication under Access controls.

A biometric scan or pin via Windows Hello, phone-as-a-token from the Microsoft Authenticator app, or a FIDO2 security key are all methods of passwordless authentication.