Enable %BRAND_AZURE_SHORT% MFA for your users using the %BRAND_AZURE_SHORT% classic portal. See Getting started with %BRAND_AZURE_SHORT% ...