Multifactor authentication is now required for applications using non-interactive flows

[m.novelli]

I got this communication from Microsoft but it's really obscure, it could affect VBO backups?

Multifactor authentication will be enforced against noninteractive flows for your XXX tenant by June 18, 2025. To help protect your organization, we’re always working to improve the security of Microsoft cloud services. As part of this, we’re changing security defaults to enforce multifactor authentication against noninteractive flows.

Starting June 18, 2025, any sign-in to applications using noninteractive flows that doesn’t meet multifactor authentication requirements will be blocked. Applications using a non-interactive flow need to satisfy multifactor authentication requirements according to the policies in security defaults. This will impact applications in your tenant that use noninteractive flows, such as resource owner password credentials (ROPC).

Recommended action: Review your tenant applications to identify any using non-interactive flows, such as ROPC. Then, update those flows to use a more secure alternative that satisfies multifactor authentication requirements. Also, ensure that Microsoft Authenticator app is enabled in your tenant, otherwise users may be blocked.

If you’re unable to make this change in time, consider temporarily disabling security defaults. Note that this removes security protections from your tenant, so we recommend turning defaults back on as soon as you update your applications.

Review complete information about the security defaults setting. If you have questions or need help, contact support.

Thanks,

Marco