![DR Technology Logo DR Technology Logo](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt4c091cd3ac9935ea/653a71456ad0f6040a6f71bd/Dark_Reading_Logo_Technology_0.png?width=700&auto=webp&quality=80&disable=upscale)
News, news analysis, and commentary on the latest trends in cybersecurity technology.
Microsoft Will Require MFA for Azure Services
Multifactor authentication enforcement for Azure portal, Microsoft Entrata admin center, and Intune admin center will begin October.
August 19, 2024
![Examples of different multifactor authentication schemes, including phone, security keys, certificates, and biometrics. Examples of different multifactor authentication schemes, including phone, security keys, certificates, and biometrics.](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt905b609b016d212b/66c4712e4e0cbb42268d1eb1/mfasecurity-geniusstudio-AdobeStock.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Starting in October, all Microsoft Azure customers will be required to have multifactor authentication (MFA) enabled on their accounts, Microsoft said.
From Microsoft's perspective, requiring MFA across its entire customer base will help reduce the risk of account compromise and data breaches. MFA can block more than 99.2% of account compromise attacks, according to the company.
Mandatory MFA will be turned on for Azure portal, Microsoft Entrata admin center, and Intune admin center, wrote Azure Computer principal product managers Naj Shahid and Bill DeForeest in a blog post. Notifications will start going out to customers via email and Azure Service Health Notifications to give them time to prepare. Customers will receive the date enforcement will begin as well as actions that need to be taken before that date.
Mandating MFA for Azure is part of Microsoft's Secure Future Initiative announced last year to integrate key security features into its products and services. Recent data breaches, such as the attacks against Snowflake customers, succeeded because the compromised systems did not have MFA enabled.
Organizations can choose from an array of MFA options, including Microsoft Authenticator, FIDO2 security keys, certificate-based authentication, and passkeys. While less secure, SMS or voice forms of MFA will also be acceptable, Microsoft said.
Organizations with complex environments or facing technical barriers to adopting MFA can request additional time. Mandatory MFA will not be required for Azure Command Line Interface, Azure PowerShell, Azure mobile app, and infrastructure-as-code tools until early 2025.
Read more about:
CISO CornerYou May Also Like
State of AI in Cybersecurity: Beyond the Hype
October 30, 2024[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024