Enable/Disable Multi-factor authentication (MFA) for selected users in M365/O365

The most common method of authenticating sign-in thru Passwords became most vulnerable with easy passwords and same passwords for multiple sign-ins to different services.

Multi-factor authentication (MFA) provides an additional level of security for sign-ins, which uses both a password (which should be strong) and an additional verification method like smart phone or biometric attribute.

The additional verification method is not employed until after the user's password has been verified. With MFA, even if a strong user password is compromised, the attacker does not have your smart phone or your fingerprint to complete the sign-in.

In few cases we need to disable MFA, for Service accounts and Shared Mailbox accounts, used/managed by a group.

Below are steps to enable/disable MFA for selected users.

Go to M365 admin center > Users > Active Users (using the below link)
https://admin.microsoft.com/Adminportal/Home#/users

Click on Multi-factor authentication.


or Go to Azure Portal > AAD > All Users (using the below link)

https://portal.azure.com/#blade/Microsoft_AAD_IAM/UsersManagementMenuBlade/MsGraphUsers

Click on Per-user MFA


It will land in a different page routing to the below link.
https://account.activedirectory.windowsazure.com/UserManagement/MultifactorVerification.aspx?BrandContextID=O365

Select the user and Click on Disable in the side pane. (If you want to enable, Click on Enable)

Click on Yes

Close the message box.

Verify the MFA Status.

Save Email attachments to SharePoint Online Library

Incoming E-Mail Settings was deprecated in SharePoint Online. In this scenario we are trying to re-create this feature using Exchange Online and Power Automate.

Below are the steps to be followed.

Step 1: Create a Shared Mailbox  [Note: Shared Mailboxes don’t require licenses assigned]

Login into https://admin.exchange.microsoft.com/#/mailboxes  Exchange admin center.

Fill the mandatory fields and click on Create. [Alias can be left blank. No blanks if entered]

Shared mailbox was created successfully.

You can use 'Add users to this mailbox' to add users to manage the Shared Mailbox as shown in above image or use 'Manage mailbox delegation' as shown in the below image to add users to manage the Shared mailbox.

Add User to Read and manage the Shared Mailbox.

Now the Shared Mailbox is ready to use.

If MFA is enabled on your tenant, please disable MFA for the Shared Mailbox account.

Step 2: Go to M365 admin center > Users > Active Users (using the below link).

https://admin.microsoft.com/Adminportal/Home#/users

Search for the Shared Mailbox you created. Select, click on Reset password to set a new password, so that you can access the Shared Mailbox.

Step 3: From App Launcher Click on Power Automate

or login into https://us.flow.microsoft.com/en-us/. Go to Templates and search for 'save my email attachment'. Click on the 'Save my email attachment to Sharepoint document library' template.

Once the template is loaded, click on Fix connection...

You will see the below screen, Click on Sign in

Pick the SharedMailBox account you created above, for the 3 Connections to be fixed.

Once the Connections were successfully completed, Click on Continue

Click on the (. . .) on top-right of each workflow item to make sure SharedMailbox account was connected under My connections.

Click on the Folder icon and select Inbox. Make sure Only with Attachments and Include Attachments is Yes (as shown below).

Select the Site Address from Dropdown or by typing the Site URL. Click on the Folder icon and select the Document Library in the Folder Path.

Verify and update To, Subject and Body fields as per your requirement. This flow will send an email notification in case of any error occurred.

On top-right below your name click on Flow Checker to view any Errors or Warnings.

On top-right or at the end of the Flow, Click on Save to save the Flow.

On top-left you will see a message 'Your flow is ready to go' as shown below.

Click on My flows, you will see the saved flow under Cloud flows.

Step 4: Verification

Sent email from my Gmail account to the SharedMailbox account.

It took more than 15 mins for the attachment to appear in the SharePoint Library.

As of now, this is only the Workaround solution found to replace the Incoming E-Mail Settings feature.