Visual Studio Subscription Tenant: "Enable multifactor authentication for your tenant by 15 October 2024"

Question

Visual Studio Subscription Tenant: "Enable multifactor authentication for your tenant by 15 October 2024"

RichardReeves-8228 0

Microsoft sent me an email (Sunday, August 18, 2024 4:30 AM) titled "Action required: Enable multifactor authentication for your tenant by 15 October 2024" ("You’re receiving this email because you’re a global administrator for [redacted - my tenant's guid]") saying I need to set up MFA on my Azure tenant. They sent it from a “noreply” account.

My azure tenant is the one I get via my Visual Studio Subscription, it's not the main one for our company.

It would have been helpful if any of the multitude of links in that email actually linked to something which told you what to do. The best I could find was a secondary link on one of those pages to this page (https://learn.microsoft.com/en-gb/entra/identity/authentication/tutorial-enable-azure-mfa). The wording on that page is terrible (as an example, it says "Browse to Protection > Conditional Access," when the item is actually "Protect > Conditional Access"); but when I get there the "+ Create new policy" button is greyed out. This is a terrible UI design decision, because I just have the frustration of seeing that the button is there, and no way of knowing why it's disabled. A better design would have allowed me to click on the button and then explain to me why I can't do that. I can only guess that perhaps I am not a "Conditional Access Administrator". I even tried changing Azure Portal > Microsoft Entra ID > Manage > Properties | Access management for Azure resources => Yes; but that didn't allow me to do it either. Since I can't create a Conditional Access policy, it means I can't follow the steps to enable MFA.

After some digging, I followed a link from "Guided walkthough" on https://learn.microsoft.com/en-gb/entra/identity/authentication/howto-mfa-getstarted which took me to https://admin.microsoft.com/AdminPortal/home?Q=learndocs#/modernonboarding/mfasetupguide, which told me "Switch to an account that has permission. Your account ([redacted]) doesn’t have permission to view or manage this page in the Microsoft 365 admin center." So I couldn’t do that either.

I notice that "Security Defaults" is enabled on my tenant, which provides MFA, and I have per-user MFA set up so maybe I don't need to do anything. But I still get the notification icon pop-up when I log in, saying that I need to do it.

I logged a ticket with our helpdesk in September.

As the date in question arrived, I postponed the change.

The ticket was finally actioned today (5th November) but they have been unable to do it either, and have suggested that I request help on here.

Can you let me know whether I need to do anything, and if so, please help me to set up MFA.

Harshitha Eligeti 4,420 Reputation points Microsoft External Staff Moderator

2024-11-07T19:57:19.97+00:00

Hi @RichardReeves-8228
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.
Harshitha Eligeti 4,420 Reputation points Microsoft External Staff Moderator

2024-11-08T19:21:23.4666667+00:00

Hi @RichardReeves-8228
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

1 answer

Your answer

Harshitha Eligeti 4,420 Reputation points Microsoft External Staff Moderator

2024-11-07T19:57:19.97+00:00

Hi @RichardReeves-8228
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.
Harshitha Eligeti 4,420 Reputation points Microsoft External Staff Moderator

2024-11-08T19:21:23.4666667+00:00

Hi @RichardReeves-8228
Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

Answer 1

Harshitha Eligeti 4,420 Microsoft External Staff Moderator

Hi @ RichardReeves-8228
Thank you for sharing your issue on Microsoft Q&A.

I understand that you received an email from Microsoft asking you to enable multifactor authentication (MFA) for your tenant by 15 October 2024, and that you've encountered difficulties setting it up. You've also tried various steps to enable MFA.

As you mentioned, you have already enabled security defaults and per-user MFA, which means MFA is configured in your tenant. Could you please check whether you registered for MFA or not?

Regarding the conditional access policy, there are three reasons why the option to create a new policy is greyed out:

Lack of permissions: To create a conditional access policy, you need at least the Conditional Access Administrator role.
P1 or P2 license is required.
Security Defaults: If security defaults are already enabled in your tenant, you won't be able to create a conditional access policy. To do so, you will need to disable the security Defaults first.

Since security defaults are currently enabled in your tenant, if you already register with MFA. You don't need to set up anything again.

Feel free to reach out if you need further assistance.

Best Regards,
Harshitha Eligeti.

RichardReeves-8228 0 Reputation points

2024-11-18T09:59:58.7566667+00:00

Apologies for the delay in responding, I've had other priorities, and I wasn't notified about the responses.

I should clarify that when I said "I have per-user MFA set up", what I meant was "I have per-user MFA set up on my user account, not as a general setting".

The security default were already set to be enabled, it wasn't something I did (I think that is the case for any tenant created after 2019).

The Microsoft Entra license is showing as "Microsoft Entra ID Free" - this is the tenant which I get via my Visual Studio monthly credits, and I don't want to be spending credits on what is a basic security requirement.

The reason why I thought I still needed to be doing something was that I was getting nagging notification messages about this while in Azure Portal, although I've gone in this morning and that notification hasn't come up (yet).

I'm going to assume there is nothing to worry about, and the fact that I postponed the change is immaterial.
Harshitha Eligeti 4,420 Reputation points Microsoft External Staff Moderator

2024-11-18T17:39:32.47+00:00

Hi @ RichardReeves-8228

As per your current configuration, there's no need to make any further changes to your tenant, as you are already registered for Multi-Factor Authentication (MFA). The pop-up notification about MFA will appear not only for you, but also for any users in the tenant who are accessing the Azure portal. This is a reminder for users who are not yet registered with MFA.

However, the notification is not dependent on whether you are registered for MFA or not. It's simply a reminder that starting from October 15; Microsoft will be sending email notifications to inform users about the upcoming mandatory MFA enforcement. For more details, please refer to the screenshot below, which provides further context on this notification.

For additional information, you can refer to this document: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication

According to the document, this notification will be displayed to all users who log in to the Azure portal, as it serves as an official communication channel about the upcoming mandatory MFA requirement. It’s just an informational notification letting users know about this upcoming change. Since you've confirmed that your user is already registered for MFA, no further action is needed from your side.

Since security defaults are already enabled for your tenant, there is no need to manually manage MFA for individual users. Security defaults will automatically require MFA for all users. The steps you've already taken align with the upcoming changes that are planned to take effect on March 15, following a delay from the original October 15 date.

Hope this helps. Do let us know if you have any further queries.

Best Regards.
Harshitha Eligeti.
Harshitha Eligeti 4,420 Reputation points Microsoft External Staff Moderator

2024-11-21T19:09:19.7766667+00:00

Hi @ RichardReeves-8228
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Harshitha Eligeti 4,420 Reputation points Microsoft External Staff Moderator

2024-11-22T19:30:06.18+00:00

Hi @ RichardReeves-8228
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Share via

Visual Studio Subscription Tenant: "Enable multifactor authentication for your tenant by 15 October 2024"

1 answer

Your answer