In Delegate365, there exist two methods to configure Multi Factor Authentication (MFA) for users: the functions “Authentication methods (MFA)”, and “MFA (Legacy)”. See the difference here, and how to disable the “MFA (Legacy)” feature.
- Authentication Methods (MFA): This is Microsoft's modern MFA setting method. Delegate365 allows you to remove authentication methods for a user, so the user will have to reconfigure their MFA if they are removed.
- MFA (Legacy): This method is deprecated, which is why we called it "Legacy." It requires a service account without MFA to work, and will stop working after March 2025, see Important update: Deprecation of Azure AD PowerShell and MSOnline PowerShell modules. Therefore, this feature is only present for historical reasons. If it is not needed, we recommend disabling it as below.
User MFA features
In the Users list, when selecting a user, the menu on the right shows the available functions. The features depend on the permission policy defined.
Availability of the MFA feature
The features depend on the permission policy defined. If the User/MFA feature is set to Yes in the administrator's assigned permission policy, both features are available to the administrator, as here. The permission policy is read after signing in. Please note that changes to the permission policy only take effect after logging in to Delegate365 again.
Disable MFA (Legacy)
To disable the MFA Legacy feature, open Administration / App settings. Leave the Administrator and Password field empty, and Save the MFA configuration to disable MFA Legacy feature for admins.
Check it
After disabling the MFA Legacy feature, the behavior is as follows: When an administrator clicks the MFA Legacy menu…
…the side panel opens, but the controls are inactive. A toast notification shows that this feature requires an administrator account and there is no functionality available.
This is it! You have successfully deactivated the “MFA (Legacy)” feature in Delegate365.
Categories: Delegate365, English, Microsoft365, Office365, Tools, atwork
Source: https://blog.atwork.at/post/Delegate365-Disable-MFA-Legacy