Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Export-MsIdAzureMfaReport to include additional admin portals #77

Open
unearthnz opened this issue Dec 13, 2024 · 1 comment
Open
Labels
bug Something isn't working

Comments

@unearthnz
Copy link

Describe the bug

As documented here: https://azuread.github.io/MSIdentityTools/commands/Export-MsIdAzureMfaReport the Export-MsIdAzureMfaReport command exports instaces of user logins to the Az Portal, Az CLI and Az Powershell to help discovery ahead of the MFA enforcement for access to these portals.

Microsoft have since announced MFA enforcement for other portals such as Entra, Intune and Microsoft 365 Admin Centre, none of which are included in the export using this module.

Could I kindly request the module is updated to include this information, as not all environments have signinlogs available via Azure Monitor (so we cant use KQL to discover) and the Entra portal Signin logs are limited in the ability to combine multiple filters (ie multiple app ID's)

To Reproduce

Steps to reproduce the behavior:

  1. Run the command included in the following documentation to generate the report: https://azuread.github.io/MSIdentityTools/commands/Export-MsIdAzureMfaReport/

Expected behavior

Report to include all platforms that are covered by the MFA enforcement (Azure Portal, Entra Admin Centre, Intune Admin Centre, Microsoft 365 Admin Centre, Azure CLI, Azure Powershell, Azure Mobile App) as listed here: https://learn.microsoft.com/en-nz/entra/identity/authentication/concept-mandatory-multifactor-authentication

Screenshots

image

Environment (please complete the following information)

  • Operating System: Windows
  • PowerShell Version: PowerShell 7.4.6
  • MS Graph PowerShell SDK Module Version: 2.24.0

Additional context

@unearthnz unearthnz added the bug Something isn't working label Dec 13, 2024
@unearthnz
Copy link
Author

Just noticed Entra & Intune portal share the same appID as Azure Portal - in which case, it is just Microsoft 365 Admin Centre we need included. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant