Migrate to the Authentication methods policy in Entra ID by 30 September 2025

Question

Regarding the above title, migration from MFA(we only use MFA) to authentication methods policy in Entra ID, I have a few questions. in my organization, we have some user which is the status multi-force auth is Enforced and some user were Disable. Just for clarification, when we start the migration to Entra ID. Does it mean that once migrate, all user setting will be by default as enabled for authentication? Or even after migrate to authentication method policy in Entra ID, are we still can assign which user authentication enable and which are disable?

Answer 1

@TSM Helpdesk Support

Thank you for posting this in Microsoft Q&A.

When you are migrating the MFA policy there is an option to select group to which you want to enable MFA.

Once the migration process is completed only those user or groups which you have selected in authentication method policies will get prompted for MFA. You can refer below article to migrate MFA and SSPR policies in Entra ID. Documentation links:

• How to migrate MFA and SSPR policy settings to the Authentication methods policy for Microsoft Entra ID: https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-methods-manage
• Manage authentication methods for Microsoft Entra ID: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-methods-manage
• Plan a Microsoft Entra multifactor authentication deployment: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-getstarted

Let us know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.