Migrate MFA and SSPR policy settings to the Authentication methods policy for Microsoft Entra ID

?? Mark your calendars: September 30th, 2025 is the deadline! On this date, legacy multifactor authentication (MFA) and legacy self-service password reset (SSPR) policies will be deprecated. After this, all authentication methods will be managed through the Authentication Methods Policy in Microsoft Entra ID.

Why act now?

This migration brings all your authentication methods under one roof, giving you greater control, flexibility (by targeting specific groups), and security. The process is fully reversible and can be done on your own schedule, but it’s crucial to begin soon.

Key Steps:

1. Audit Your Current Policies: Review your existing MFA and SSPR settings.
2. Security Questions for SSPR: A control for security questions is coming soon. If you use security questions and don't want to disable them, keep them enabled in the legacy SSPR policy until the new control is available. You can finish the migration with security questions still enabled.
3. Prepare for Migration: Document everything to ensure a smooth transition.
4. Start the Migration: Update your Authentication Methods Policy and initiate the migration process.
5. Audit your migration progress

Finish the Migration: After confirming that your migration is successful, finalize the switch and remove legacy settings.

Once migrated, start managing MFA and SSPR from Entra ID > Protection > Authentication methods > Policies

Migrating early gives you the flexibility and control you need to manage your authentication methods effectively. Don’t wait—start your migration today!

Known Issues and Limitations:

• Individual User Targeting Removed: Users previously targeted individually should be moved to a group.
• Registration Failures with Multiple Groups: Authentication method registration may fail if too many groups are included. Consolidate multiple groups into a single group per method, adding the new group and removing old ones simultaneously to avoid issues.

Please find the official Microsoft article here!