Migrate to the Authentication Methods policy in Azure Active Directory by 30 September 2024

We recently received a notification from Microsoft 365 that all legacy Authentication methods for MFA and SSPR need to be migrated to Azure AD Authentication Methods policy by September 2024.

Microsoft provided step by step instructions, but we always ended up with an error message when attempting to complete the migration:

Couldn’t save the new migration state: You cannot move to migration complete until disabling all methods in the legacy MFA and SSPR policies.

Microsoft’s instructions stated that all legacy SSPR and MFA authentications must be disabled, before moving to the 3rd and final step of the migration.

However, even though we had disabled all legacy methods, the error message persisted.

After raising a support ticket with Microsoft 365 support, we found out that the App Passwords policy must also be disabled before the migration can be completed.

Please note that all four checkboxes under “Verification Options” should be unticked. The image above shows “Verification code” as ticked – This is wrong.

This finally allowed us to complete the Authentication methods migration in Azure AD.

2 thoughts on “Migrate to the Authentication Methods policy in Azure Active Directory by 30 September 2024

  1. One also needs to deselect (untick) “Verification code from mobile app or hardware token” & save before migration can be completed.
    Your image shows it ticked

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes:

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>