This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 77%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENB%3C/text%3E%3C/svg%3E)
17.03.2024 on all "demo" tenants (CDX) https://cdx.transform.microsoft.com/the MFA policy was enforced for the fake "Contoso" organization. Not for the partner org, but for the demo tenants!!!
This is really troublesome for me as a partner, and makes those demo tenants much less useful!
Is there a way to change this back and disable MFA, so that customers can "play" with the demo?
Once again, the policy talks about "partner" tenants, which actually makes sense; but what is applied to is also the "demo" tenants, which does not. And you can't remove it, it's enforced :(
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 39%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENW%3C/text%3E%3C/svg%3E)
We have the same problem on our demo systems. We share access to our demo systems with our pre-sales consultants who login as one of the demo users in the CDX tenant so that they can showcase our integrations with Microsoft products. All our demo systems with Microsoft integrations have been affected by this policy change and rendered useless, so we are now scrambling to replace every CDX tenant used in our demo systems.
I understand the requirement to increase security - i just wish we had been warned of the impending change, or provided with a solution for our use case.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 69%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKL%3C/text%3E%3C/svg%3E)
We've encountered a similar challenge as others have noted. Our presales teams utilize demo tenants to showcase the integration capabilities of MS Teams with various third-party applications we advise on. Unfortunately, the existing setup falls short of meeting our business needs.
Any "demo" tenant is owned by Microsoft, as clearly stated in their "terms of use", which was also updated to mention the requirement for MFA. So I'm afraid this is the new behavior going forward.
You can open a support case with the CDX team if you think you might be able to change their mind.
This would be really sad. I hope somebody from Microsoft will read this and apply some common sense to it to revert this policy back for the DEMO tenants.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 40%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJF%3C/text%3E%3C/svg%3E)
Here is a bigger issue. MFA was turned on for all of my demo CDX tenants. However, one of them is expired and I'm trying to remove it. I am not allowed to delete an expired CDX tenant now because of MFA???
"There was an issue deleting M365x823........ . Please change the Admin user's password back to the default password and disable MFA if it has been activated then try to delete the tenant again."
I tried to Disable MFA, doesn't work. This is an annoying problem that the CDX team needs to fix. I submitted a support ticket.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(240, 21%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDT%3C/text%3E%3C/svg%3E)
We have the same issue, basically can't remove expired demo tenants due to enforced MFA. I manually deleted the tenant directly through Azure AD, then tried again to remove from CDX portal.
I get a different error message now "Issue deleting M365....Contact Support" and so I have done just that.
Hopefully this problem is resolved soon
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 34%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAG%3C/text%3E%3C/svg%3E)
Please provide clear instruction on HOW TO DELETE THE TENANT, my environment are expired and I cannot use CDX at all.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@Nikolay Belykh Thank you for reaching out to us, reached out to CDX team to confirm this change, here is the response which I got:
MFA is being enforced and required for all CDX demo to enhance platform security posture. This is not something our team disable or change, as it is part of a global change to Microsoft demo tenants. Additionally, please note, customer access to demo tenants as described in the post is against CDX Terms of Use.
Let me know if you have any further questions, feel free to post back or raised a ticket a with CDX team directly as they don't work/reply on QnA platform.
Givary, issue I'm facing right now that I'm sure everyone else is. There is no way to delete an expired demo CDX tenant now because MFA is on.
"There was an issue deleting M365x823........ . Please change the Admin user's password back to the default password and disable MFA if it has been activated then try to delete the tenant again."
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 89%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJH%3C/text%3E%3C/svg%3E)
Not a problem for me. for having MFA turned on. But I'm unable to exclude my resource accounts that are been used by the MTR rooms. That aren't able to support MFA seen the shared nature. Can this be fixed asap ... or can someone explain me how I can accomplish that.
As you can see I can alter the first policy . .. but the second one I can't alter at all ...
I've tried to change multiple things here ... but all ending up with the same error.
Blocking me to use my MTR rooms and demo.
Looking forward to your insigths and guidance
@Anonymous yeah that is also an issue. From my perspective/opinion they need to make the following adjustments with MFA being turned on
This made me struggle a lot when trying to demo passwordless features, as well as plenty other Conditional Access scenarios. This policy should only be enforced to users with privileged roles.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 68%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENH%3C/text%3E%3C/svg%3E)
How do we reach out to cdx support to have mfa reset?