👋 Starting 3 Feb 25, Microsoft will start enforcing MFA when anyone tries to access the Microsoft 365 admin centre. Learn more at techcommunity.micros... - ThreadSky

merill.net • 105 days ago

👋 Starting 3 Feb 25, Microsoft will start enforcing MFA when anyone tries to access the Microsoft 365 admin centre.

Learn more at https://techcommunity.microsoft.com/blog/microsoft_365blog/announcing-mandatory-multifactor-authentication-for-the-microsoft-365-admin-cent/4232568

Comments

heicher.com•105 days ago

Everything in our 365 tenant is MFA’d. It was interesting trying to get a new user enrolled with Authenticator and only got it to work after temporarily adding a phone number for SMS. 4 hours later, a 365 service notification saying it was broken arrived.

andyh16.bsky.social•105 days ago

Surprised it’s taken so long!

merill.net•105 days ago

Very few SaaS services enforce MFA.

magrom.bsky.social•105 days ago

Finally!

gupi-ro.bsky.social•103 days ago

It is funny, even after previous awareness messages, I have received requests to "...disable MFA for the service account..." (actually EntraID user account) "...because it cannot authenticate in Azure and scripts are failing due to MFA...".

jeftek.com•103 days ago

It's amazing how adding additional security control requirements identify all the activity that was being done with just a password.....

gupi-ro.bsky.social•103 days ago

Yep, all the skeletons in the closet 🤭

alexmags.bsky.social•103 days ago

Service accounts were the safest way for automation scripts to authenticate because you could apply CA policies to limit use to specific IPs or devices. But now you can buy Workload Identity licences and protect app registrations with CA policies too. Time to switch.

alexmags.bsky.social•103 days ago

Workload Identity feature licences not expensive. Limits access in case secret gets compromised. Alternative to service accounts that bypassed MFA but compensated with network location CA policies.
https://learn.microsoft.com/en-us/entra/identity/conditional-access/workload-identity

gupi-ro.bsky.social•103 days ago

Thanks Alex! Neither costs, nor will are the problem (it's hard to change a wheel to a one-mile moving train!)

brodersen.cloud•103 days ago

If only that was the only problem. I’m working with a team that are still using legacy authentication in one of their apps and they have no plans of upgrading to a more modern way of using service principals.

Comments

Posting Rules

Reply