MFA for admins in azure/entra is already enabled via conditional access. Does MS also force normal users to use MFA?

Barabasch, Simon 20 Reputation points
2025-09-04T12:18:41.86+00:00

We received the "action required" mail.

"To further increase your security, we’ll require users to sign in using multifactor authentication (MFA) before performing any resource management actions in Azure starting 1 October 2025. To take advantage of the extra layer of protection MFA offers, we recommend enabling MFA for users as soon as possible."

MFA for admins is already enabled through conditional access. One contributor account is excluded as it automates some businesscentral tasks - will the exclusion work after 1st October?

Are normal users also required to MFA after 1st October? If not will it be forced in the future?

Azure Role-based access control
Azure Role-based access control

An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.

0 comments
Answer accepted by question author
Michele Ariis 7,315 Reputation points MVP Volunteer Moderator
2025-09-04T12:26:14.4333333+00:00

Hi, starting October 1, 2025, Microsoft will mandate MFA for anyone managing Azure resources (portal/CLI/PowerShell/SDK/IaC/REST); read-only operations remain excluded. Conditional Access exclusions do not bypass this. "Regular users" will only perform MFA if they perform management actions; apps/services are not affected. The user-based "contributor" automation account will be affected: it will migrate to a workload identity (service principal or managed identity). The programmatic access rollout can be postponed until July 1, 2026, but this is only a postponement.

Was this answer helpful?

1 person found this answer helpful.
0 comments

0 additional answers

Sort by: Newest
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.