Will Oct 24 MFA inforcement will impact our user creation by a machin account ?

Question

We have a machine account that creates user account using API graph.microsoft.com/v1.0/users/ . The request is done with an autorization token.

This machine use machine email and machine pwd to get its autorization token from https://login.microsoftonline.com/${TENANT_ID}/oauth2/v2.0/token

Will 15th Oct 24 MFA inforcement will impact our user creation process ?

Answer 1

Hi @Laurent F

Yes, the MFA enforcement on October 15th may affect the automation process using machine email and machine pwd. According to Microsoft’s announcement, all user identities will require MFA verification when performing any create, read, update, or delete (CRUD) operations. This means your script might need to pass MFA verification when obtaining the OAuth token.

To avoid disruptions, it is recommended to migrate these user identities to workload identities (such as managed identities and service principals), as these identities are not affected by the MFA enforcement. If you have emergency access accounts that also need MFA configuration, consider using FIDO2 keys or certificate-based authentication to meet the MFA requirements.

Refer to similar issue.

---

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.