I need to delay multi factor authentication beyond the March 15, 2025 deadline.

John Gallagher 0

I need to delay multi factor authentication beyond the March 15, 2025 deadline. We have a system that is using user credentials that cannot be updated by that time. How do I continue to delay it?

John Gallagher 0 Reputation points

2025-02-15T15:03:51.6766667+00:00

We are working on a move to the service principal but it's going to take longer than expected. How can we delay the mfa requirements?
Marcin Policht 35,595 Reputation points MVP

2025-02-15T15:15:51.7966667+00:00

if so, then follow https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication#request-more-time-to-prepare-for-enforcement

We understand that some customers may need more time to prepare for this MFA requirement. Microsoft is allowing customers with complex environments or technical barriers to postpone the enforcement for their tenants until September 30, 2025.

Starting in 2nd half of February 2025, Global Administrators can go to the Azure portal to select the start date of enforcement for their tenant for admin portals in Phase 1. Global Administrators must elevate access before they can postpone the start date of MFA enforcement.

Global Administrators must perform this action for every tenant where they want to postpone the start date of enforcement.

By postponing the start date of enforcement, you take extra risk because accounts that access Microsoft services like the Azure portal are highly valuable targets for threat actors. We recommend all tenants set up MFA now to secure cloud resources.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

1 answer

Marcin Policht 35,595 Reputation points MVP

2025-02-15T14:37:04.26+00:00

Transition to a managed identity, service principal, or workload identity - https://learn.microsoft.com/en-us/entra/architecture/service-accounts-principal#move-from-a-user-account-to-a-service-principal

If using a service principal, secure by following https://www.christianfrohn.dk/2024/04/22/securing-service-principals-in-microsoft-entra-id-with-conditional-access-policies/

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

I need to delay multi factor authentication beyond the March 15, 2025 deadline.

1 answer

Your answer