With Security defaults (MFA) enabled how are service accounts setup?

Question

The more I read the confused I get with MFA setups.

We have customers who use Microsoft D365 F&O. My understanding is that when user's log into D365 they should be setup to use MFA. This can be done in Microsoft Entra admin center and enabling Security defaults.

My issue / question is we have a Windows service which accesses the D365 via web services using the Client Id and Secret. The process also reads the data from the Microsoft Entra ID applications form within D365 F&O. This matches a client Id to a User Id.

How does MFA affect this process?

Does the user Id referenced here need to have MFA disabled?

Any assistance is appreciated.

Thanks

Duane

Answer 1

If using a Client Id and Secret then no, MFA wouldnt apply because it sounds like this is a workload identity.

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication#accounts