multifactor authentication premium trial

Rollocop 20 Reputation points
2023-03-31T08:34:16.3633333+00:00

I have received an email saying "Migrate to the Authentication methods policy in Azure Active Directory by 30 September 2024 " which states "You're receiving this notice because you have authentication methods configured in the legacy Azure Active Directory (Azure AD) MFA and SSPR policies. ".

It might be that we set this up a very long time ago and forgot or that a 365 CS rep did this for us to solve a problem, but Im unaware of this.

Anyway, I follow the instructions to migrate to the new method by following this path - Azure Active Directory > Security > Multifactor Authentication > Additional cloud-based multifactor authentication settings - However, I can only get as far as "Multifactor Authentication".

On this screen there is a message saying I can get a Premium Trial to use this.

If we apparently have this setup, why can I not get in to change the settings?

I dont want join the trial if I dont need to.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. Akshay-MSFT 17,961 Reputation points Microsoft Employee Moderator
    2023-03-31T11:43:27.6466667+00:00

    @Rollocop

    Thank your for posting your query on Microsoft Q&A. Seems like you have Azure AD/Office 365 free version of MFA, where following apply:

    • You can use security defaults to prompt users for multi-factor authentication as needed but you don't have granular control of enabled users or scenarios, but it does provide that additional security step.
    • Even when security defaults aren't used to enable multi-factor authentication for everyone, users assigned the Azure AD Global Administrator role can be configured to use multi-factor authentication. This feature of the free tier makes sure the critical administrator accounts are protected by multi-factor authentication.

    Action to be done:

    • Kindly work only on Migration of policy for Azure AD Global admins if its free one, you don't have to get the premium trials to disable it.
    • If it does not allow you that means there are no policies set, so you may focus on SSPR policy. click Password reset > Authentication methods. The Mobile phone option in this policy allows either voice calls or SMS to be sent to a mobile phone. The Office phone option allows only voice calls. Screenshot of password reset settings.
    • Set the status to under migration.

    User's image

    Let me know if you have any further queries.

    Thanks,

    Akshay Kaushik

    Please "Accept the answer" (Yes/No), and share your feedback if the suggestion works as per your business need. This will help us and others in the community as well.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.