Enable multifactor authentication for your tenant by 15 October 2024

Question

Starting 15 October 2024, we will require users to use multifactor authentication (MFA) to sign into the Azure portal, Microsoft Entra admin center, and Intune admin center. To ensure your users maintain access, you’ll need to enable MFA by 15 October 2024. If you can’t enable MFA for your users by that date, you’ll need to apply to postpone the enforcement date. If you don’t, your users will be required to set up MFA.

Action required

• To identify which users are signing into Azure with and without MFA, refer to our documentation.
• To ensure your users can access the Azure portal, Microsoft Entra admin center, and Intune admin center, enable MFA for your users by 15 October 2024.
• If you can’t enable MFA by 15 October 2024, apply to postpone the enforcement date.

I can't postpone it even with Global admin, what access do I need?Screenshot 2024-08-19 at 09.30.19.png

We have embedded Okta SSO and having MFA turn on is going to break our integration.

How do I turn it off and not forced for good?

Answer 1

@Claire Lee Richert

Thank you for posting this in Microsoft Q&A.

As I understand you are unable to submit a request for postponing the MFA enforcement date.

You are getting an error because, first you will have to elevate your access as a Global Administrator and then try to submit a request for the extension.

Follow below steps to elevate access for a Global Administrator,

1. Sign in to the Azure portal as a Global Administrator. If you are using Microsoft Entra Privileged Identity Management, activate your Global Administrator role assignment.
2. Open Microsoft Entra ID.
3. Under Manage, select Properties.
4. Under Access management for Azure resources, set the toggle to Yes.

When you set the toggle to Yes, you are assigned the User Access Administrator role in Azure RBAC at root scope (/). This grants you permission to assign roles in all Azure subscriptions and management groups associated with this Microsoft Entra directory. This toggle is only available to users who are assigned the Global Administrator role in Microsoft Entra ID.

Once you elevate access for a Global Administrator, now you can try to submit the request for extending the MFA enforcement date.

Currently, we do not have an option to turn this enforcement OFF. However, you can extend it for now.

Let us know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.