Does Exchange online cmdlet requires MFA after m365 phase 2 MFA enforcement

Question

Exchange online is not mentioned in the MFA enforcement page. when MFA will be enforced for exchange online.

reference link : https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication

Answer 1

At some point Microsoft may enforce MFA on any Exchange workload, but for now, they are focusing on "management" workloads first.

You can of course, require MFA now for Microsoft 365 workloads with Conditional Access or in general if using security Defaults or per user MFA

You can also enforce MFA on admin portals:

https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps#microsoft-admin-portals

Answer 2

Hi, @soorya raj

There is currently no official documentation of a specific time for the implementation of MFA for Exchange Online.

Starting 3 February 2025, Microsoft will begin requiring MFA for all users accessing the M365 admin centre. This requirement will be rolled out in phases at the tenant level.

There is no impact to Exchange Online end users at this time.

You can also follow Andy's advice to enforce MFA on the admin portal.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".