How will the enforcement of mandatory MFA for Azure Sign-ins impact Quest Enterprise Reporter? (4378233)

In 2024, Microsoft announced they will be enforcing mandatory multifactor authentication (MFA) for all Azure sign-in attempts. How will Quest Enterpriser Reporter be impacted?

For more information on the MFA enforcement, please see:
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication 

and

https://azure.microsoft.com/en-us/blog/announcing-mandatory-multi-factor-authentication-for-azure-sign-in/  

The first phase of the enforcement in the second half of 2024 impacts sign-ins to the Azure portal and Microsoft Entra admin center applications.  The second phase of enforcement in early 2025 impacts sign-in for Azure PowerShell and other APIs that are used by Enterprise Reporter for Microsoft 365 discoveries.

As of Enterprise Reporter version 3.5.1, Microsoft 365 discoveries support both multi-factor authentication enabled and disabled credentials.  However, using MFA enabled credentials has some limitations. The limitations include:

Entra ID discovery – Risky users and Entra ID extended attributes are not collected

Azure Resources – Full collection fails with no data returned

Exchange Online – All Exchange Online permissions, Mailbox Folders, Mailbox Statistics, Public Folders, Dynamic Groups and members are not collected

Microsoft Teams – Files and folders (drives) are not collected

SharePoint Online – Full collection fails with no data returned

OneDrive – Full collection fails with no data returned.

To workaround the limitations, use non-MFA discovery credentials. With the second phase enforcement of multi-factor authentication by Microsoft in early 2025, this workaround will no longer be available.   Customers can submit a request to Microsoft to postpone the enforcement for their tenants until March 15, 2025. Global Administrators can go to the Azure portal to postpone the start date of enforcement. For more information see:

https://portal.azure.com/#view/Microsoft_Azure_Resources/MfaSettings.ReactView.

We are working on resolving the limitations in the next release of Enterprise Reporter.  For more information, please contact Quest Support.