Enhancing Security: A Step-by-Step Guide to Blocking Legacy Authentication in Microsoft 365
- Jack Davies
- Jan 15
- 1 min read
Updated: Jul 12
Why block Legacy Authentication?
Blocking legacy authentication in Office 365 enhances security by preventing outdated protocols like POP, IMAP, and SMTP from being exploited. These protocols lack modern security features, making accounts vulnerable to attacks like brute force and credential stuffing. It strengthens overall protection.
How to block Legacy Authentication:
You first need to go to https://entra.microsoft.com
Next, go to Protection > Conditional Access > Policies

Call the policy a relevant name

Next, Click 'Users' and include 'All users' or create a group for this.
Next, add the 'Target resources' to 'All cloud apps'
Next, change the 'conditions' to include the below Client apps:
Next, go to Access Controls > Grant and enable 'Block access'
Click 'Enable policy'

Comments