I need some help figuring out how to set up MigrationWiz without relying on user credentials because all our users have Multi-Factor Authentication (MFA) enabled. I've been in touch with BitTitan support, but their responses are frustratingly slow and have not been helpful. They keep suggesting that I just enter the user credentials, which isn't possible due to MFA.
We have several tenants that are still using Exchange Server and we want to move them over to Exchange Online, specifically migrating mailboxes only. I've successfully registered the app in M365 Entra and configured it in MigrationWiz, but every task I attempt results in a "Failed (Verification)" error. It seems like MigrationWiz is rejecting both admin and user credentials because of the MFA restrictions. Is there a workaround that doesn't involve disabling MFA for the users or admin accounts, which we want to avoid for security reasons? Any insights or advice would be tremendously appreciated!
1 Answer
You might want to consider setting up Conditional Access MFA exclusions for the app or the IPs making the migration calls. This could help bypass the MFA block. Alternatively, if you're okay with a temporary measure, you could exclude the account used for migration from MFA.
Thanks for the suggestion! I had started looking into Entra logs but hadn't gone this deep yet. The challenge is that some of our tenants are small and using Security Defaults, which means we can't set up Conditional Access without turning off Security Defaults first. I'll need to look into that.