---
title: How to postpone enforcement for a tenant where users are unable to sign in after rollout of mandatory multifactor authentication (MFA) requirement for the the Azure portal, Microsoft Entra admin center, or Microsoft Intune admin center
description: A script to postpone enforcement for a tenant where users are unable to sign in after rollout of mandatory MFA requirement for the the Azure portal, Microsoft Entra admin center, or Microsoft Intune admin center
ms.service: entra-id
ms.subservice: authentication
ms.topic: conceptual
---
# How to postpone enforcement for a tenant where users are unable to sign in after rollout of mandatory MFA requirement
Users might not be able to sign into the Azure portal, Microsoft Entra admin center or Microsoft Intune admin center if they have trouble using their MFA method after the mandatory requirement to use MFA is rolled out to their tenant.
If users are unable to sign in, you can run the following script as a Global Administrator to temporarily postpone the MFA enforcement for your tenant.
The script takes the following actions:
- The script picks the user's tenant if they have one, or presents a list of tenants for them to choose from. Optionally, the script asks for the date of enforcement. The default date is September 30th, 2025.
- Logs the user into that tenant.
- Gets the relevant authentication tokens.
- Checks if user has elevated access. If not, the script does the elevation.
---
title: How to postpone enforcement for a tenant where users are unable to sign in after rollout of mandatory multifactor authentication (MFA) requirement for the Azure portal, Microsoft Entra admin center, or Microsoft Intune admin center
description: A script to postpone enforcement for a tenant where users are unable to sign in after rollout of mandatory MFA requirement for the Azure portal, Microsoft Entra admin center, or Microsoft Intune admin center
ms.service: entra-id
ms.subservice: authentication
ms.topic: conceptual
---
# How to postpone enforcement for a tenant where users are unable to sign in after rollout of mandatory MFA requirement
Users might not be able to sign into the Azure portal, Microsoft Entra admin center, or Microsoft Intune admin center if they have trouble using their MFA method after the mandatory requirement to use MFA is rolled out to their tenant.
If users are unable to sign in, you can run the following script as a Global Administrator to temporarily postpone the MFA enforcement for your tenant.
The script takes the following actions:
- Picks the user's tenant if they have one, or presents a list of tenants for them to choose from. Optionally, the script asks for the date of enforcement. The default date is September 30, 2025.
- Logs the user into that tenant.
- Gets the relevant authentication tokens.
- Checks if user has elevated access. If not, the script does the elevation.