October 15th MFA enforcement

Question

Hello,

I have some questions and concerns about the MFA enforcement coming October 15th 2024. I am hoping we can confirm that this is for the Entra admin center, Azure portal, and Intune only?

Also i want to confirm if security defaults are going to be enforced on this date? Can we still opt out of security defaults if they are enforced?

Answer 1

Confirmed...

The dates are listed at https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication and they do include the Entra admin center, the Intune Admin center, and the Azure portal.

Security defaults would apply if you don't use P1 or P2 licensing (with Conditional Access). As per the aforementioned article:

If your organization chose to retain Microsoft’s security defaults, and you currently have security defaults enabled, your users don't see any changes as MFA is already required for Azure management. If your tenant is using Conditional Access policies in Microsoft Entra and you already have a Conditional Access policy through which users sign into Azure with MFA, then your users don't see a change. Similarly, any restrictive Conditional Access policies that target Azure and require stronger authentication, such as phishing-resistant MFA, continue to be enforced. Users don't see any changes.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

Hi Coltin,

I am hoping we can confirm that this is for the Entra admin center, Azure portal, and Intune only?

Yes, only Azure portal, Entra admin, Intune admin.

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication#scope-of-enforcement

Also i want to confirm if security defaults are going to be enforced on this date? Can we still opt out of security defaults if they are enforced?

You can use Per-user MFA (free), or enable Security Defaults (free), or Conditional Access (requires at least P1 licenses). Per-user MFA would be least disruptive free option since you could apply it only to your users that access admin portals. Conditional Access is best option, but isn't free.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP