Will MFA be required on Break Glass accounts

Terry Blake 0

We have setup Break Glass access in the event our main accounts are compromissed and we are locked out. Will the new MFA reuiements apply to thise accounts

Harshitha Eligeti 325 Reputation points Microsoft Vendor

2024-09-09T16:28:48.45+00:00

Hi @ Terry Blake

Thank you for sharing this on Microsoft Q&A.

I hope the solution provided by @akinbade abiola is helpful.

If you have any further questions or need additional assistance with setting this up, please let us know! We’re happy to help.

Regards,

Harshitha Eligeti.
Harshitha Eligeti 325 Reputation points Microsoft Vendor

2024-09-12T05:25:54.1033333+00:00

Hello @Terry Blake

Following up to see if the above comment was helpful. If it answered your question, please click "Accept Answer" and indicate "Yes" if the answer was helpful. If you have any further questions, feel free to let us know.

Thank you!

2 answers

akinbade abiola 18,305 Reputation points

2024-09-03T17:36:08.7866667+00:00

Hello Terry Blake,

Thanks for your question.

Yes, Break glass or emergency access accounts are also required to sign in with MFA once enforcement begins. We recommend updating these accounts to use passkey (FIDO2) or configure certificate-based authentication for MFA. Both methods satisfy the MFA requirement.

See: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication#applications

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola
Please sign in to rate this answer.
Terry Blake 0 Reputation points

2024-09-09T17:37:58.4933333+00:00

We have additional concerns for the MFA requirements. Currently we have CA rules in place and have created exceptions to MFA enforcement for Service mailboxes. with Delegated users. Will this over ride the MFA exceptions by the new MFA enforced policy effective Oct 15th- 2024?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Terry Blake 0 Reputation points

2024-09-09T16:52:23.41+00:00

We have additional concerns for the MFA requirements. Currently we have CA rules in place and have created exceptions to MFA enforcement for Service mailboxes. with Delegated users. Will this over ride the MFA exceptions by the new MFA enforced policy effective Oct 15th- 2024?
Please sign in to rate this answer.
Markus Schwarz 0 Reputation points

2024-09-11T17:05:53.9+00:00

Thats interest me too.
We have by our customers our CA Framework in every severals Conditional Access Policies the service Accounts and different users are excluded.

Thanks for the answer
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Will MFA be required on Break Glass accounts

2 answers

Your answer