MFA Migration and Licensing

Question

A customer of mine received an email about migratng MFA before 09/24 here https://msendpointmgr.com/2023/03/06/migrating-to-authentication-methods/

The article is extremely biased though and only really applies to basic tenants. My question is how in the world are we supposed to do this when we have so many special use cases.

#1 We have plenty of customers that were required to bypass the Security Defaults due to restrictions causing problems with their setups.

#2 App passwords have to be used for a lot of situations involving special business critical software

#3 What are we supposed to do with clients who do not have Azure licenses? We won't be able to manage a conditional access policy and they will apparently be required to enable security defaults which will break a lot of functionality.

Answer 1

Thank you for asking this question on the Microsoft Q&A Platform.

According to the answer in this thread:

the unified Authentication methods policy in Azure AD consolidates multifactor authentication (MFA), SSPR, and passwordless authentication methods into one management location and allows for more granular control over authentication methods

So, it won't be a requirement to use Conditional access or acquire a bunch of Azure AD Premium P1/P2 license. Please review the following documentation for:

• How to migrate MFA and SSPR policy settings to the Authentication methods policy for Azure AD
• and Manage authentication methods for Azure AD

Hope this helps!

---

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.