Microsoft to enforce MFA for Azure resource management in October

Starting October 1, 2025 Microsoft will gradually enforce multi-factor authentication (MFA) for Azure resource management actions—covering Azure CLI, Azure PowerShell, Azure mobile app, Infrastructure-as-Code tools, SDKs, and REST API endpoints for Create/Update/Delete operations—and requires MFA for user identities used by automation. Microsoft advises upgrading Azure CLI to 2.76+ and Azure PowerShell to 14.3+, allows global admins to postpone enforcement until July 2026, points to monitoring/reporting tools and scripts for MFA registration, and references prior related announcements and studies showing strong MFA effectiveness (and GitHub's 2FA enforcement).