Microsoft to enforce MFA for Microsoft 365 admin center sign-ins

Microsoft will start enforcing multi-factor authentication (MFA) for all users accessing the Microsoft 365 admin center starting next month.

While MFA requirements for the admin center began rolling out in February 2025, Microsoft will now enforce this for all users and block those without MFA enabled from signing in to the Microsoft 365 administrative portal after the change goes live on February 9th, 2026.

This will affect the portal.office.com/adminportal/home, admin.cloud.microsoft, and admin.microsoft.com admin center URLs used by IT administrators to manage Microsoft 365 accounts and services.

Microsoft said that enforcing MFA for all admin center sign-ins adds critical protection beyond standard password security, making it significantly harder for attackers to compromise accounts.

“Implementing MFA in the Microsoft 365 admin center significantly reduces the risk of account compromise, prevents unauthorized access, and safeguards sensitive data,”