Microsoft has announced that multifactor authentication (MFA) is now enforced across 100% of Azure tenants for Azure Portal sign-ins.
Key Points
- MFA enforcement was first announced in May 2024.
- Global admins were warned in Aug 2024 to enable MFA by Oct 15, 2024.
- Next phase (Oct 2025): MFA will also be enforced on Azure CLI, PowerShell, SDKs & APIs.
Why It Matters
Microsoft studies show that:
- MFA blocks 99.99% of account hacking attempts.
- MFA reduces the risk of account takeover by 98.56%, even when stolen credentials are used.
This rollout follows Microsoft’s broader push for MFA across its ecosystem:
- Conditional Access policies requiring MFA for all admins on Microsoft 365, Exchange, Azure & Entra.
- GitHub’s 2FA enforcement for all developers (Jan 2024).
At Alcaeus Services, we help organizations strengthen their identity security, adopt modern authentication, and protect against account takeover threats.
