Basic Auth Deprecation - Identify Apps that are Using Basic Auth

Question

Hello All,

With Basic Auth deprecating - what is the best way to identify all the apps that are using basic auth so they can be migrated?

Many thanks

Answer 1

To identify if your users have apps that are using basic auth, you can go to the sign-ins page:

1) Navigate to the Azure portal > Azure Active Directory > Sign-ins.
2) Add the Client App column if it is not shown by clicking on Columns > Client App.
3) Add filters > Client App > select all of the legacy authentication protocols. Select outside the filtering dialog box to apply your selections and close the dialog box.
4) If you have activated the new sign-in activity reports preview, repeat the above steps also on the User sign-ins (non-interactive) tab.

These logs will indicate which users are still depending on legacy authentication and which applications are using legacy protocols to make authentication requests.

Another way to do this is to create a Conditional Access policy in reporting mode and query for legacy authentication.

Refer to:
How to: Block legacy authentication to Azure AD with Conditional Access
What is Conditional Access report-only mode?