Skip to main content

Hi, i made an azure query, but i cant get if the user has MFA activated or no?

I saw Graph function "GET MFA Status" But it requires some permissions that I dont have.

Is there any chance to get MFA details for a user? I want to implement that in my playbook, and see if a user has MFA activated or not?

Thanks.

< DELETED >


< DELETED >


@mikewilusz ,

I think your answer was meant for this post: https://www.googlecloudcommunity.com/gc/SecOps-SOAR/Playbook-failure-watcher/td-p/921137/jump-to/first-unread-message.

@Simon_King_79 FYI.

In terms of the original question, @MikelSA , our Enrich User action should allow you to get this information, but let me check and get back to you. It's just weird that Azure requires a separate dedicated request just for this.




@mikewilusz ,

I think your answer was meant for this post: https://www.googlecloudcommunity.com/gc/SecOps-SOAR/Playbook-failure-watcher/td-p/921137/jump-to/first-unread-message.

@Simon_King_79 FYI.

In terms of the original question, @MikelSA , our Enrich User action should allow you to get this information, but let me check and get back to you. It's just weird that Azure requires a separate dedicated request just for this.




Perfect, thank you.


Perfect, thank you.


@MikelSA ,


Looks like you are right, there is a different dedicated method to return information about MFA. Our current integration doesn't support it, so you would need to open a FR request for it.


@MikelSA ,


Looks like you are right, there is a different dedicated method to return information about MFA. Our current integration doesn't support it, so you would need to open a FR request for it.


Okai, thank you very much


@MikelSA ,


Looks like you are right, there is a different dedicated method to return information about MFA. Our current integration doesn't support it, so you would need to open a FR request for it.


With the action "Get user MFA" on graph integration, would it possible?


With the action "Get user MFA" on graph integration, would it possible?


@MikelSA ,


From my quick research:


https://graph.microsoft.com/beta/users/$($User.Id)/authentication/requirements

Should return this information.


@MikelSA ,


From my quick research:


https://graph.microsoft.com/beta/users/$($User.Id)/authentication/requirements

Should return this information.


Okai, thanks a lot.


Reply