Enable MFA 15 october 2024

Question

Starting 15 October 2024, we will require users to use multifactor authentication (MFA) to sign into the Azure portal, Microsoft Entra admin center, and Intune admin center. To ensure your users maintain access, you’ll need to enable MFA by 15 October 2024. If you can’t enable MFA for your users by that date, you’ll need to apply to postpone the enforcement date. If you don’t, your users will be required to set up MFA.

Hello,

If I create a Conditional Access policy that excludes a security group from MFA, will it work? We have some accounts that may still need basic authentication.

Or do you have any tips to achieve that?

Thank you.

Answer 1

No, it will not work. As mentioned in the documentation, there are no exceptions to this enforcement. You can postpone this if you have valid business reasons, but sooner or later you need to meet the requirements. Details are in the documentation: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication#request-more-time-to-prepare-for-enforcement