Enforce MFA for SharePoint Online Sites with Conditional Access Policies

%3CLINGO-SUB%20id%3D%22lingo-sub-1402342%22%20slang%3D%22en-US%22%3EEnforce%20MFA%20for%20SharePoint%20Online%20Sites%20with%20Conditional%20Access%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1402342%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMicrosoft%20is%20previewing%20a%20capability%20to%20allow%20Office%20365%20tenants%20to%20block%20access%20to%20SharePoint%20Online%20sites%20unless%20accounts%20use%20multi-factor%20authentication.%20Protection%20is%20set%20on%20a%20per-site%20basis.%20It's%20part%20of%20the%20move%20to%20remove%20basic%20authentication%20from%20as%20many%20places%20in%20Office%20365%20as%20possible.%20MFA%20stops%20account%20compromise%2C%20so%20it's%20a%20good%20thing.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fenforce-mfa-sharepoint-online-sites-conditional-access-policies%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fenforce-mfa-sharepoint-online-sites-conditional-access-policies%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1402342%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESharePoint%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1408004%22%20slang%3D%22en-US%22%3ERe%3A%20Enforce%20MFA%20for%20SharePoint%20Online%20Sites%20with%20Conditional%20Access%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1408004%22%20slang%3D%22en-US%22%3E%3CP%3ENeat%20feature%20-%20always%20wondered%20when%20more%20user%20actions%20were%20going%20to%20be%20added%20to%20CA.%26nbsp%3B%20No%20sync%20is%20a%20bit%20of%20a%20roadblock%20until%20fixed%20though.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CBLOCKQUOTE%3E%3CSPAN%3EAccording%20to%20a%20Microsoft%20session%20at%20the%20RSA%20Conference%202020%2C%20in%20January%202020%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Foffice365itpros.com%2F2020%2F03%2F03%2Fbasic-authentication-exchange-online-so-bad%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20nofollow%22%3Eonly%2011%25%20of%20enterprise%20Office%20365%20accounts%20were%20enabled%20for%20MFA%3C%2FA%3E%3CSPAN%3E.%26nbsp%3B%3C%2FSPAN%3E%3CBR%20%2F%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EThat's%20unbelievable!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
MVP

 

Microsoft is previewing a capability to allow Office 365 tenants to block access to SharePoint Online sites unless accounts use multi-factor authentication. Protection is set on a per-site basis. It's part of the move to remove basic authentication from as many places in Office 365 as possible. MFA stops account compromise, so it's a good thing.

 

https://www.petri.com/enforce-mfa-sharepoint-online-sites-conditional-access-policies

1 Reply

Neat feature - always wondered when more user actions were going to be added to CA.  No sync is a bit of a roadblock until fixed though.

 

According to a Microsoft session at the RSA Conference 2020, in January 2020 only 11% of enterprise Office 365 accounts were enabled for MFA

That's unbelievable!