Overview:
Important capabilities and updates to improve your security posture and protect your customers' tenants are now available on Xvantage for Customers (X4C). This guide reviews what they are, as well as the steps you can take to boost your security and stay up to date with the changes.
Process:
MFA for M365 admin center - Microsoft is enforcing multifactor authentication (MFA) for all users signing into Microsoft 365 admin center portal. Review the latest information and timeline.
Security Workspace AI Assistant - The Partner Center AI assistant can answer your questions about the Security workspace. The AI assistant provides guidance on various security-related tasks, including enabling MFA, managing security alerts, and understanding security roles and requirements. The AI assistant answers the most frequently asked questions about using the Security workspace and is available to help you:
Resolve partner queries
Clarify requirement details
Navigate learning resources efficiently
How to access the AI assistant - In Partner Center, click the AI button in the top-right corner of the dashboard. Select the Security Workspace and select Ask AI to begin.
Explore the new Security requirements UI in Partner Center - The Security requirements experience has been redesigned to clearly separate mandatory and recommended controls, making it easier for partners to distinguish which security requirements must be completed as a condition of their continued CSP authorization. To learn more, see Security requirements for Partner Center.
Coming soon
Security Workspace for Resellers - We’re excited to announce that Security Workspace will begin a gradual rollout to indirect resellers starting in October. This phased approach will ensure smooth experience, with initial access provided to a limited group and expansion to all resellers over the following weeks. Stay tuned for more details on timing.
MFA For Partner Center - To enhance security, multifactor authentication (MFA) will be enforced for all pages in the Partner Center portal and for API access.
MFA enforcement for all pages is being rolled out in the Partner Center portal starting Sep 8, 2025.
The API will be code-ready for MFA on September 30, 2025.
MFA will also be mandatory for API access starting April 1, 2026.
Adopting these updates promptly will help avoid service disruptions and ensure your systems stay aligned with Partner Center’s security standards. To learn more about MFA, APIs, and other security standards, see Mandating multifactor authentication (MFA) for your partner tenant.
Next steps
Sign up for the CSP Community call to know more about upcoming changes.
Sign up for dedicated CSP Technical Training to have your queries answered by subject matter experts.
Review the July partner API blog and learn about other important API changes that will require action in the weeks ahead.
Learn how to support and protect customers with security training and certifications covering ransomware, threat signals, and more.