From a778d005b65f939c9931f128641bc2a50f27a7de Mon Sep 17 00:00:00 2001 From: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com> Date: Thu, 5 Jun 2025 14:10:27 +0200 Subject: [PATCH] fix(docs): add mfa warning for users (#7924) Co-authored-by: Pepe Fagoaga --- docs/getting-started/requirements.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/getting-started/requirements.md b/docs/getting-started/requirements.md index e5d6087c1f..3f3a48cbb2 100644 --- a/docs/getting-started/requirements.md +++ b/docs/getting-started/requirements.md @@ -170,6 +170,9 @@ These two new environment variables are **required** to execute the PowerShell m - `M365_USER` should be your Microsoft account email using the **assigned domain in the tenant**. This means it must look like `example@YourCompany.onmicrosoft.com` or `example@YourCompany.com`, but it must be the exact domain assigned to that user in the tenant. + ???+ warning + The user must not be MFA capable. Microsoft does not allow MFA capable users to authenticate programmatically. See [Microsoft documentation](https://learn.microsoft.com/en-us/entra/identity-platform/scenario-desktop-acquire-token-username-password?tabs=dotnet) for more information. + ???+ warning Using a tenant domain other than the one assigned — even if it belongs to the same tenant — will cause Prowler to fail, as Microsoft authentication will not succeed.