{"id":8643,"date":"2024-10-03T14:00:00","date_gmt":"2024-10-03T18:00:00","guid":{"rendered":"https:\/\/www.gticanada.com\/?p=8643"},"modified":"2024-11-04T22:21:50","modified_gmt":"2024-11-04T21:21:50","slug":"microsoft-enforces-multi-factor-authentication","status":"publish","type":"post","link":"https:\/\/www.gticanada.com\/en\/blog\/microsoft-enforces-multi-factor-authentication\/","title":{"rendered":"Get ready! Microsoft will enforce multi-factor authentication to access admin portals starting October 15."},"content":{"rendered":"\n

Azure and Microsoft 365 administrators need to get ready for a major change: enabling MFA, or multi-factor authentication, on administrator accounts becomes mandatory on October 15, 2024.\u00a0 Without it, they will no longer be able to access the Entra administration portals, the Microsoft Azure portal and the Microsoft Intune administration center and all services accessible via it (ie. Windows 365 Cloud PC).<\/p>\n\n\n\n

What does it mean in practice?<\/strong><\/h3>\n\n\n\n

MFA is a secure authentication method that requires a minimum of two verification factors to access the desired service. For example, when you need to enter a password and then a code received by text message, you are using the multi-factor authentication method.<\/p>\n\n\n\n

Microsoft will now require this to be enabled to ensure that administrators can log in to the Azure portal, the Microsoft Entra administration center and the Intune administration center.<\/p>\n\n\n\n

If MFA is not activated by October 15, administrators will be asked to register for multi-factor authentication before they can access the Azure Portal, Microsoft Entra Administration Center or Intune Administration Center the next time they log in.<\/p>\n\n\n\n

Why this change?<\/strong><\/h3>\n\n\n\n

By making MFA mandatory, Microsoft is simply strengthening the security of your data. It’s one of the most effective measures available. Research conducted by Microsoft has shown that this simple measure blocks 99.2% of account compromise attacks [1<\/a>]. In addition, Les Affaires recently estimated that 41% of SMEs that had been victims of a cyber attack reported damages of over $100,000 [2<\/a>]. Microsoft’s new measure therefore seems to us to be judicious, not to say essential.<\/p>\n\n\n\n

Are other Microsoft applications affected?<\/strong><\/h3>\n\n\n\n

Yes, Microsoft has planned a 2-phase timetable. The first phase is scheduled for October 15, 2024, and the second for early 2025. The second phase will concern the following applications:<\/p>\n\n\n\n