User blocked in MFA, where is the reason logged?

Andrew Brehm 56 Reputation points
2021-11-15T11:55:48.887+00:00

When an MFA administrator blocks a user and gives a reason in the web interface, where is that action logged and where can I later find the reason?

Similarly when the user is being unblocked and a reason given, where would I find that event and the reason?

It's not in the normal MFA logs apparently.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,465 questions
0 comments
Accepted answer
  1. Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee
    2021-11-15T23:01:44.43+00:00

    Search for Multi-factor authentication in the toolbar and select it. Then, in the "Block/unblock users" section, you should see the list of blocked users along with the Replication group, User, Reason, Date, and Action.

    149480-image.png

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. IAMUser 6 Reputation points
    2022-09-01T16:54:58.847+00:00

    I have the opposite. Where is the reason logged after unblocking. When unblocking a user, it ask to give a reason. I normally put a case number. Where is that kept to review past unblocking reasons?