Block/Unblock users in MFA is gone

Question

Block/Unblock users in MFA is gone

Carl Bradley HISD 30

As of this morning, block/unblock users in MFA has disappeared. We had our global admin look as well and it is gone for him. Please advise.

Carl Bradley HISD 30 Reputation points

2025-04-09T11:47:14.6133333+00:00

Well, within minutes of posting this, it magically reappeared........
Andy David - MVP 157.8K Reputation points MVP Volunteer Moderator

2025-04-09T11:49:17.9+00:00

No issues here. Seeing this in the portal still!
Blaylock, David (TFG) 15 Reputation points

2025-04-10T19:04:31.9+00:00

I'm having the same issue with the GA account. I'm waiting for ours to come back as of this very second. I'm keeping hopeful it's just a blip!
Carl Bradley HISD 30 Reputation points

2025-04-10T19:08:14.3+00:00

Yup, it is gone again......
Blaylock, David (TFG) 15 Reputation points

2025-04-10T19:14:14.47+00:00

If you need something in a pinch, the Microsoft Entra Admin Center should also be there for you for Block/Unblock Users

https://entra.microsoft.com/#view/Microsoft_AAD_IAM/BlockedUsersBlade
Robert Gyulasaryan 5 Reputation points

2025-04-10T20:30:46.6566667+00:00

same issue here, both in Azure / Entra and going to Entra admin portal, Block/Unblock is missing from the MFA page:

But ONLY in Entra portal (Not Azure portal itself) I was able to do a search for Block/Unblock, and it was able to find it:
Roger Stokes 16 Reputation points

2025-04-11T14:16:51.6733333+00:00

Same issue here. no block/unblock.
Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator

2025-04-11T15:34:49.4+00:00
Hello Roger Stokes , Carl Bradley HISD , Robert Gyulasaryan

As part of the Microsoft Secure future initiative, Microsoft is retiring specific legacy multi-factor authentication (MFA) settings\features in Entra ID. These include:

MFA fraud Alert

Block/unblock users

To replace MFA Fraud Alert and Block/unblock users you can use Report suspicious activity to allow users to report fraudulent verification requests. These alerts are integrated with Identity Protection and allow for a more comprehensive block functionality than what was available with Block/unblock users. Users who report an MFA prompt as suspicious are set to High User Risk.

If you have a P2 license, you can use risk-based conditional access policies to automatically limit access for these users or require them to change their password.

If you have a P1 license, you can use risk detection events to manually identify and disable impacted users or set up custom workflows. To learn more about investigating and remediating risk, refer to the following documentations: How to: Investigate Risk , How to: Remediate risk detections and unblock

For additional information and configuration please follow the documentation to replace the MFA Fraud Alert and Block/unblock users: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-mfasettings#report-suspicious-activity

Hope this helps let us know if you have any additional queries happy to assist you further.
Roger Stokes 16 Reputation points

2025-04-11T16:14:44.5933333+00:00

Hello, thank you for the reply. Goutam Pratti. the link provided Blaylock, David (TFG) worked to get me where I normally would go to check on what users accidently selected "no" when MFA'ing in. but I still don't see the normal, way to get there without that link. Edit: I did try and do a search for the block/unblock like suggested by Robert Gyulasaryan, that also did work. guess I just need to remember that from now on.
Victor Constantin Vedeanu 5 Reputation points

2025-04-29T07:22:09.47+00:00

Hi,

This is an ongoing issue, we cannot check blocked users and unlock, only by the link provided above.

What is the actual menu that should guide us for MFA blocked users?

Accepted answer

0 additional answers

Your answer

Carl Bradley HISD 30 Reputation points

2025-04-09T11:47:14.6133333+00:00

Well, within minutes of posting this, it magically reappeared........
Andy David - MVP 157.8K Reputation points MVP Volunteer Moderator

2025-04-09T11:49:17.9+00:00

No issues here. Seeing this in the portal still!
Blaylock, David (TFG) 15 Reputation points

2025-04-10T19:04:31.9+00:00

I'm having the same issue with the GA account. I'm waiting for ours to come back as of this very second. I'm keeping hopeful it's just a blip!
Carl Bradley HISD 30 Reputation points

2025-04-10T19:08:14.3+00:00

Yup, it is gone again......
Blaylock, David (TFG) 15 Reputation points

2025-04-10T19:14:14.47+00:00

If you need something in a pinch, the Microsoft Entra Admin Center should also be there for you for Block/Unblock Users

https://entra.microsoft.com/#view/Microsoft_AAD_IAM/BlockedUsersBlade
Robert Gyulasaryan 5 Reputation points

2025-04-10T20:30:46.6566667+00:00

same issue here, both in Azure / Entra and going to Entra admin portal, Block/Unblock is missing from the MFA page:

But ONLY in Entra portal (Not Azure portal itself) I was able to do a search for Block/Unblock, and it was able to find it:
Roger Stokes 16 Reputation points

2025-04-11T14:16:51.6733333+00:00

Same issue here. no block/unblock.
Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator

2025-04-11T15:34:49.4+00:00

Hello Roger Stokes , Carl Bradley HISD , Robert Gyulasaryan

As part of the Microsoft Secure future initiative, Microsoft is retiring specific legacy multi-factor authentication (MFA) settings\features in Entra ID. These include:

MFA fraud Alert

Block/unblock users

To replace MFA Fraud Alert and Block/unblock users you can use Report suspicious activity to allow users to report fraudulent verification requests. These alerts are integrated with Identity Protection and allow for a more comprehensive block functionality than what was available with Block/unblock users. Users who report an MFA prompt as suspicious are set to High User Risk.

If you have a P2 license, you can use risk-based conditional access policies to automatically limit access for these users or require them to change their password.

If you have a P1 license, you can use risk detection events to manually identify and disable impacted users or set up custom workflows. To learn more about investigating and remediating risk, refer to the following documentations: How to: Investigate Risk , How to: Remediate risk detections and unblock

For additional information and configuration please follow the documentation to replace the MFA Fraud Alert and Block/unblock users: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-mfasettings#report-suspicious-activity

Hope this helps let us know if you have any additional queries happy to assist you further.
Roger Stokes 16 Reputation points

2025-04-11T16:14:44.5933333+00:00

Hello, thank you for the reply. Goutam Pratti. the link provided Blaylock, David (TFG) worked to get me where I normally would go to check on what users accidently selected "no" when MFA'ing in. but I still don't see the normal, way to get there without that link. Edit: I did try and do a search for the block/unblock like suggested by Robert Gyulasaryan, that also did work. guess I just need to remember that from now on.
Victor Constantin Vedeanu 5 Reputation points

2025-04-29T07:22:09.47+00:00

Hi,

This is an ongoing issue, we cannot check blocked users and unlock, only by the link provided above.

What is the actual menu that should guide us for MFA blocked users?

Answer 1

Hello @Carl Bradley HISD ,I Understand block/unblock users in MFA has been disappeared. You had your global admin look as well and it is gone for him, But suddenly within minutes of posting this, it magically reappeared.

I believe this issue occurred due to a page loading problem. I have tested it in my tenant as well, and the users appeared correctly.
User's image

If you encounter any issues with blocking or unblocking users, please feel free to reach out to us. We’re happy to assist you further.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

Block/Unblock users in MFA is gone

0 additional answers

Your answer