Does the recent enforcement of MFA for MS Azure, and Entra affect users who use MFA via SAML SSO

Question

Received the following email:

Action required: Enable multifactor authentication for your tenant by 15 October 2024

I just wanted to know if this matters if our environment has MFA enforced using SAML SSO setup for signing into Azure, and Entra?

Thank you

Answer 1

@Josten Mitchell

Thank you for posting this in Microsoft Q&A.

There will be no impact on any users in Azure, if they are already enabled for MFA.

If you are using third party MFA for users in your environment, and If your third party MFA provider is able to send the MFA claim to Azure post performing secondary authentication, then you can disregard this email. Azure receives an information stating the user as already performed an MFA then Azure will not prompt for MFA again. Sending MFA claim to Azure will be the way for letting Azure know that MFA is already being performed.

You can also add your third party MFA provider as external authentication in Entra ID portal. You can follow below instructions,

https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-external-method-manage

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.