Requires modern authentication for applications

​

What this check verifies

Microsoft 365 SharePoint tenant settings require modern authentication for applications and block access for apps using legacy protocols. The assessment determines whether legacy authentication is disabled so only OAuth-based sign-ins with advanced controls are allowed.

​

Risk

Without modern authentication, SharePoint is exposed to:

• Password spraying and credential stuffing (no MFA)
• Session/token capture and replay from basic auth
• Unauthorized access leading to data exfiltration and tampering

This undermines data confidentiality and integrity, enabling lateral movement.

​

Recommendation

Enforce modern authentication tenant-wide and disable legacy protocols. Require MFA and apply conditional access to all SharePoint apps. Migrate or block legacy clients, adhere to least privilege for app permissions, and monitor sign-ins to eradicate legacy auth usage.

​

Remediation

​

References

• https://learn.microsoft.com/en-us/graph/api/resources/sharepoint?view=graph-rest-1.0
• https://learn.microsoft.com/en-us/powershell/module/sharepoint-online/set-spotenant?view=sharepoint-ps

​

Where this check fires

This check runs on every scheduled scan against your Microsoft 365 account. Findings appear at Cloud Security → Findings filterable by Check ID = sharepoint_modern_authentication_required. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

---

← Back to Microsoft 365 checks