CIPP Integrated Application

Question

Hello,

I'm attempting to use our new tool CIPP with Microsoft integration to gather MFA reports for unprotected users. I've looked for information to contact their support but can't find anything. I'd like some clarification on the categories provided with the MFA report.

Categories:

Account Enabled - Does this mean sign-in is blocked, or what exactly?

MFA Registration - Appears to be inaccurate with some organizations. Is this something caused by our configuration or possibly something else?

No Data - Some of the fields state no data. Does this mean the organization configuration is the issue or something else?

Answer 1

Hi Turner,

Thank you for posting your query on Microsoft Q&A.

With regard to your questions about the CIPP MFA reports with Microsoft integration, please find the detailed information below:

• Account Enabled: This status indicates whether an account is active and allowed to sign in. If "Account Enabled" is true, the account is not blocked and the user should be able to attempt sign-in, unless other restrictions like conditional access or sign-in blocks are in place. "Disabled" means the account is not permitted to sign in.
• MFA Registration: MFA registration status can sometimes show inaccuracies due to differences in tenant configuration, delayed API data, or permission/role inconsistencies. Inconsistent reports may occur if MFA policies are not uniformly applied or if the CIPP service account lacks full read access to user details. Confirm that MFA enforcement and reporting are consistent across all tenants being monitored.
• No Data: A "No Data" value usually means that the relevant information is not available, either because the tenant or user is not configured for the queried attribute, or the tool does not have sufficient permissions to retrieve it. It may also result from temporary communication issues with Microsoft APIs or insufficient licensing (e.g., Entra P1 requirement).

Steps to Troubleshoot and Improve Reporting:

1. Verify that the CIPP integration account has sufficient API permissions and directory read access.
2. Ensure that targeted tenants have the appropriate Microsoft Entra licensing for MFA reporting.
3. Review and apply uniform MFA policies across users and groups.
4. Refer to official CIPP documentation for specific configuration and troubleshooting steps.

Please refer to:

• Manage user profiles in Microsoft Entra ID
• Troubleshoot Azure Multi-Factor Authentication issues | Microsoft Learn

Please click "Accept as Answer" if this resolves your query. This will help others with similar questions find a quick solution.