Microsoft 365: Outdated Authentication Blocked from July

Microsoft 365 Security Overhaul: Admin Approval Now Required for App Access

In a move to bolster cyber defenses, Microsoft is implementing significant security enhancements to Microsoft 365. Starting in July 2025, outdated authentication methods will be blocked, and administrator permission will become mandatory for third-party applications seeking access to user data.

The rollout of these new Microsoft 365 security protocols is slated to begin mid-july and continue through August 2025.

“secure Future Initiative” Drives Changes

These changes are part of Microsoft’s broader “Secure Future Initiative,” launched in November 2023. This initiative prioritizes cybersecurity improvements across Microsoft’s solutions and infrastructure, embodying the principle of “Secure by Default.”

The core of the update focuses on three critical areas:

• Blocking Legacy Browser Authentication: The Relying Party Suite (RPS) protocol, susceptible to brute force and phishing attacks, will be blocked for SharePoint and OneDrive access.
• Disabling FPRPC Protocol: The Frontpage Remote Procedure Call (FPRPC) protocol, rarely used and posing vulnerability risks, will be disabled for opening Office files.
• Mandatory Admin Consent: Users will no longer be able to grant third-party apps access to files or sites without explicit administrator approval.

Organizations that have previously blocked user consent or implemented adapted consent institutions are exempt from the app access change. Admins can also configure granular access rules for specific apps or user groups.

Preparing For The Impending Microsoft 365 Security Changes

Microsoft recommends organizations urgently review their current RPS and FPRPC settings. Inform IT managers, app owners, and security teams about the upcoming changes. Update internal documentation and, if necessary, configure the Admin Consent Workflow process. Microsoft provides a dedicated manual for this purpose.

These adjustments will automatically apply to all Microsoft 365 environments, impacting how data is accessed and processed.

Key Changes At A Glance

Feature	Old Behavior	New Behavior (July 2025)	Reason
Browser Authentication (SharePoint/OneDrive)	RPS Protocol Allowed	RPS Protocol Blocked	mitigate Brute Force and Phishing Attacks
Office File Opening	FPRPC Protocol allowed	FPRPC Protocol Blocked	Reduce Vulnerability risks
Third-Party App Access	User Consent allowed	Administrator Approval Required	Enhance Security and Control

Did You know? Microsoft Threat Intelligence reported a 150% increase in password spray attacks targeting cloud services in the first quarter of 2025.

The Broader Impact Of Enhanced Microsoft 365 Security

The move signifies a stronger stance on data protection and access control within the Microsoft 365 ecosystem. Organizations must adapt quickly to ensure seamless operations under the new security framework.

This update aligns with the Cybersecurity and Infrastructure security Agency’s (CISA) recommendations for Zero Trust architecture, emphasizing least privilege access and continuous validation.

Pro Tip: Regularly audit third-party application access and permissions within your Microsoft 365 environment to maintain a strong security posture.

Evergreen Insights: Building a Secure Microsoft 365 Environment

beyond these immediate changes,creating a truly secure Microsoft 365 environment requires ongoing vigilance and proactive measures.

• Implement Multi-Factor Authentication (MFA): MFA adds an extra layer of security, making it considerably harder for attackers to gain unauthorized access.
• Regularly Train Employees: Educate your workforce about phishing scams and other cyber threats to minimize human error.
• Monitor for Suspicious Activity: Implement security monitoring tools to detect and respond to suspicious activity in real-time.
• Keep Software Up-to-Date: Regularly patch software vulnerabilities to prevent attackers from exploiting known weaknesses.
• Develop an Incident Response Plan: Have a plan in place to quickly and effectively respond to security incidents.

Frequently Asked Questions About Microsoft 365 Security Updates

Why is Microsoft making these Microsoft 365 security changes?

Microsoft is enhancing Microsoft 365 security to combat evolving cyber threats and ensure a “Secure by Default” environment.

When will these Microsoft 365 security changes take effect?

The changes are scheduled to roll out starting in mid-July 2025 and continue through August 2025.

What are the key Microsoft 365 security changes being implemented?

Key changes include blocking outdated authentication protocols and requiring administrator approval for third-party app access to files and sites.

How will this Microsoft 365 security impact my organization?

Organizations may need to adjust internal documentation and workflows to align with the new admin consent requirements for app access.

what should I do to prepare for these Microsoft 365 security updates?

Microsoft advises organizations to review their current settings for RPS and FPRPC usage and inform IT managers, app owners, and security teams.

Where can I find more information about the Admin Consent Workflow process?

Microsoft provides a detailed manual on configuring the Admin Consent Workflow.

Are you prepared for these changes? How will your organization adapt?

Share your thoughts and questions in the comments below!

What are the potential implications of the Microsoft 365 outdated authentication block on the use of PAA (poly(acrylic acid)) in enterprise email systems, given the thixotropic properties of concentrated PAA solutions?

Microsoft 365: Outdated Authentication Block Begins in July – Are You Ready?

Microsoft is taking a notable step to enhance the security of its Microsoft 365 services. A crucial update is on the horizon: the blocking of outdated authentication methods. This change, commencing in july, impacts how you access services like Exchange Online and othre Microsoft 365 applications. This article will walk you through what this means, why it’s happening, and, most importantly, how you can prepare to avoid disruption.

Why is Microsoft Blocking Outdated Authentication?

The shift away from outdated authentication is driven by a critical need to improve security. These older methods are susceptible to various cyber security threats. they lack the robust defenses of modern authentication protocols providing an easy entry point for attackers. Microsoft’s documented stance emphasizes the importance of safeguarding your accounts.

Let’s break down the primary reasons for this change:

• Enhanced Security: Outdated methods like Basic Authentication and POP/IMAP/SMTP are vulnerable to password-based attacks,phishing,and brute-force attempts.
• Better User Experience: Modern Authentication, with its support for Multi-Factor Authentication (MFA), provides a more secure and user-amiable experience.
• Compliance & Regulations: Many industry regulations and best practices encourage or mandate the use of modern authentication practices.

What is outdated Authentication?

Outdated authentication mainly refers to the use of methods that rely solely on a username and password, without implementing extra security layers. These are the methods that are at risk of being blocked. these methods often do not support multi-factor authentication (MFA), allowing attackers to exploit leaked credentials. The switch will impact primarily on Exchange Online mailboxes but can impact several other areas in Microsoft 365.

Here’s a table summarizing common outdated authentication methods:

Authentication Method	Description	Risk
Basic Authentication	Username and password onyl	Vulnerable to credential attacks
POP3/IMAP/SMTP	Protocols that often used Basic Auth to access email	Phishing and password compromise
Legacy Exchange ActiveSync clients	Clients that were not upgraded to current versions	Security and Compatibility issues

Understanding Modern Authentication and its advantages

In contrast, modern authentication refers to identity management methods that utilize more secure protocols. this includes using multi-factor authentication (MFA) and support for OAuth 2.0, offering significant security benefits.Modern Authentication is strongly linked with the security requirements of the current era of phishing attacks and corporate intrusions.

Key features of modern authentication include:

• Multi-Factor Authentication (MFA)
• OAuth 2.0
• Federated Authentication

Benefits of Modern Authentication:

• Enhanced security: MFA dramatically reduces the effectiveness of password-based attacks.
• Improved User Experience: Seamless login experiences across devices and platforms.
• Compliance: Supports industry standards and regulatory requirements

How to Prepare for the Block: Essential Steps

Preparation is crucial. To ensure you’re ready when Microsoft blocks outdated authentication, you need to follow some key steps:

1. Assess Your Habitat: Identify any applications or devices using outdated authentication. you do this by navigating to the Microsoft 365 admin centre. Use the sign-in logs. From here, examine the legacy authentication protocols;
   • log into the microsoft 365 admin center.
   • Go to Reports > Usage.
   • Click “Email activity” or any similar reporting option.
   • Look for the “Authentication” column. It will clearly show how legacy protocols are currently being used.
2. Enable Multi-Factor Authentication (MFA): This is a crucial layer of security. Require all your users to enable MFA and consider the use of conditional access policies.
3. Update Email Clients: Ensure all email clients, including Outlook, mobile apps and other mail services, are updated to support Modern Authentication.
4. Review and Update Apps: All applications that connect to Microsoft 365 services using outdated methods must be configured to use Modern Authentication.
5. Test and verify: Test modern Authentication with selected users to confirm that all required connections and applications are functioning correctly.

Practical Tips For a Smooth Transition

• Communicate with users: Keep your users informed about the changes. Provide clear instructions and training on how to enable MFA and authenticate using modern methods.
• Create a Rollback Plan: Although rare, have a plan in place in case issues arise during the transition.