Liongard Ideas Portal

Submit and upvote ideas to make Liongard better. You get 20 votes so vote wisely. 🙂

To learn more about our Ideas Portal, check out our FAQs.
To schedule a feedback session with a member of the Liongard Research Team, click here.

See what we've shipped by clicking here!

Office 365 Inspector - Show MFA status per-user

  • Matt Miller
  • Jun 1 2019
  • Shipped
Inspector Data Improvement
  • Dec 17, 2019

    Admin response

    Quick update: We know this is high value to you information. Microsoft has begun making this information on a per-user basis only in cases where a higher-end Azure AD license is available. We are working on how to best surface that data for users where it is available and clearly indicate to the user in cases where it isn't available from Microsoft at all.

  • Attach files
  • Dave P commented
    13 Jul, 2020 03:53pm

    I'm able to pull this information from MSOL using the $user.strongauthenticationrequirements properties including "state", "methodtype" (isdefault subproperty) "phonenumber", "alternativephonenumber", "email"

    ×

    Attachments Open full size

  • Admin
    Daniela Weisz commented
    29 May, 2020 02:16pm

    Hi Dave,
    That's correct. We're only able to capture this information based on the access Microsoft provides and currently we're only able to capture the MFA status of users for accounts with an Azure AD Premium P1 license or higher.

    ×

    Attachments Open full size

  • Dave P commented
    22 May, 2020 05:37pm

    Was this considered shipped even though it requires the Azure AD Premium license? I'm seeing unknown for all my tenants.

    ×

    Attachments Open full size

  • Alex Membrey commented
    9 Apr, 2020 04:32pm

    It's worth also noting that Microsoft have MFA implemented in two different ways. Enforcement on a per user basis and also via conditional access.

    So also having an MFA registered/enrolled state and by which authentication type would be useful.

    ×

    Attachments Open full size

  • Josh Kelly commented
    2 Oct, 2019 09:49pm

    Sent from my iPhone

    Kind Regards,
    Josh Kelly
    Service Manager

    P: 1300 688 020
    M: 0447 805 457
    E: josh.kelly@hdit.com.au

    Technical Support: support@hdit.com.au
    Quotes & Sales: sales@hdit.com.au
    The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without the written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future. Please consider the environment before printing this email.���

    image252261.png
    image025573.png
    image101877.png
    image636610.png
    ×

    Attachments Open full size

  • Vaughn Snyders commented
    1 Oct, 2019 06:34pm

    This is becoming a key security requirement and would be nice to report and alert on it. 

    ×

    Attachments Open full size

  • andrew stafford commented
    15 Aug, 2019 01:26pm

    This could help with the alerts also. We like the alerts that alert on MFA not being enabled for certain users but it does not show which users.  

    ×

    Attachments Open full size

  • +18

Related ideas