Hi,
Is it possible to read strongAuthentication or strongAuthenticationRequirements attribute to be read via Azure connector. Or is there any other schema attribute in Azure connector which can tell the MFA registration status of the user.
1 Like
Hey @abhishek_chowdhury, Thanks for posting this question. I am going to poke around internally for someone that has the answer to your question.
1 Like
Hey @abhishek_chowdhury, someone from our India team should be able to provide an answer for you when they return tomorrow. Thanks for your patience!
1 Like
@abhishek_chowdhury Microsoft has not provided any API to get the MFA registration details for user , so currently connector is not able provide these details. Only way currently to get these attributes is powershell commands .which can be found in this MS Post
1 Like
The /beta/reports/credentialUserRegistrationDetails graph api method allows you to query individual users to determine if they are mfa registered, enabled for sspr, etc… Unfortunately its not available on the get user method directly and requires a separate call. There isn’t a graph api method yet that I’ve found that allows the mfa settings to be reset. Certain methods can be manipulated via the /beta/users//authentication/methods endpoint, but not everything yet.
2 Likes
We developed a separate connector to get the details and correlation based on the upn to solve this use case
1 Like
Hi Abhishek. We got a request to auto-populate the mobile phone number into users’ Azure MFA, and am interested in your solution. Would you be willing to share the details, if not the actual code? Thanks.
Hi,
I have used the web service connector and Azure graph api to build a connector to fetch the required info and populate an Identity attribute. If you have postman rest api’s to update the phone, then it would be easy to translate postman into a web service connector.
To keep it simple name the application appropriately as it will create an additional link on the Identity cube
Thanks,
Abhishek
Thank you for replying so quickly. Looks like they added managing Azure MFA to the connector ootb at some point:
https://documentation.sailpoint.com/connectors/microsoft/azure_ad/help/integrating_azure_active_directory/mfa_management.html
https://documentation.sailpoint.com/connectors/microsoft/azure_ad/help/integrating_azure_active_directory/mfa_schema_attributes.html
4 Likes
Hi Farley
is this for IdentityIQ or IdentityNow??
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.