I need to delay multi factor authentication beyond the March 15, 2025 deadline.

Question

I need to delay multi factor authentication beyond the March 15, 2025 deadline.

John Gallagher 0

I need to delay multi factor authentication beyond the March 15, 2025 deadline. We have a system that is using user credentials that cannot be updated by that time. How do I continue to delay it?

John Gallagher 0 Reputation points

2025-02-15T15:03:51.6766667+00:00

We are working on a move to the service principal but it's going to take longer than expected. How can we delay the mfa requirements?
Marcin Policht 49,640 Reputation points MVP Volunteer Moderator

2025-02-15T15:15:51.7966667+00:00

if so, then follow https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication#request-more-time-to-prepare-for-enforcement

We understand that some customers may need more time to prepare for this MFA requirement. Microsoft is allowing customers with complex environments or technical barriers to postpone the enforcement for their tenants until September 30, 2025.

Starting in 2nd half of February 2025, Global Administrators can go to the Azure portal to select the start date of enforcement for their tenant for admin portals in Phase 1. Global Administrators must elevate access before they can postpone the start date of MFA enforcement.

Global Administrators must perform this action for every tenant where they want to postpone the start date of enforcement.

By postponing the start date of enforcement, you take extra risk because accounts that access Microsoft services like the Azure portal are highly valuable targets for threat actors. We recommend all tenants set up MFA now to secure cloud resources.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
John Gallagher 0 Reputation points

2025-02-21T13:16:01.0766667+00:00

The postpone option is still greyed out. I need to postpone the start date to the 9/30/2025 date mentioned above. How can I do that?

3 answers

Your answer

John Gallagher 0 Reputation points

2025-02-15T15:03:51.6766667+00:00

We are working on a move to the service principal but it's going to take longer than expected. How can we delay the mfa requirements?
Marcin Policht 49,640 Reputation points MVP Volunteer Moderator

2025-02-15T15:15:51.7966667+00:00

if so, then follow https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication#request-more-time-to-prepare-for-enforcement

We understand that some customers may need more time to prepare for this MFA requirement. Microsoft is allowing customers with complex environments or technical barriers to postpone the enforcement for their tenants until September 30, 2025.

Starting in 2nd half of February 2025, Global Administrators can go to the Azure portal to select the start date of enforcement for their tenant for admin portals in Phase 1. Global Administrators must elevate access before they can postpone the start date of MFA enforcement.

Global Administrators must perform this action for every tenant where they want to postpone the start date of enforcement.

By postponing the start date of enforcement, you take extra risk because accounts that access Microsoft services like the Azure portal are highly valuable targets for threat actors. We recommend all tenants set up MFA now to secure cloud resources.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
John Gallagher 0 Reputation points

2025-02-21T13:16:01.0766667+00:00

The postpone option is still greyed out. I need to postpone the start date to the 9/30/2025 date mentioned above. How can I do that?

Answer 1

Transition to a managed identity, service principal, or workload identity - https://learn.microsoft.com/en-us/entra/architecture/service-accounts-principal#move-from-a-user-account-to-a-service-principal

If using a service principal, secure by following https://www.christianfrohn.dk/2024/04/22/securing-service-principals-in-microsoft-entra-id-with-conditional-access-policies/

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

Andy David - MVP 157.4K MVP Volunteer Moderator

You cant enable postponement until Feb 24th, 2025:

User's image

John Gallagher 0 Reputation points

2025-02-25T13:56:32.6833333+00:00

It is now February 25 and the option is still greyed out.
John Gallagher 0 Reputation points

2025-02-25T13:57:25.69+00:00

It is now February 25 and it still greyed out
John Gallagher 0 Reputation points

2025-02-25T16:12:05.8033333+00:00

It is now February 25 and it is still greyed out.
John Gallagher 0 Reputation points

2025-02-25T20:39:07.0933333+00:00

It is past 2/24/2025 and the link is still greyed out. How can I get the rollout postponed?

Answer 3

Andy David - MVP 157.4K MVP Volunteer Moderator

Hi, date pushed to March:

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication#client-libraries

User's image

Share via

I need to delay multi factor authentication beyond the March 15, 2025 deadline.

3 answers

Your answer