MFA Secure Score not showing completed with Conditional Access applied

Question

MFA Secure Score not showing completed with Conditional Access applied

Stefan Vestin 5

Hello I am trying to improve my secure score and two of the things I want to complete is require MFA for users and admins.

I have already created a Conditional Access requiring MFA to all users (except one) and all my admin accounts have MFA applied, however it has not completed the secure score item yet. It's been over a week since I applied the Conditional Access.

The secure score is saying that one user has MFA enforced which must be from the legacy MFA where one admin had MFA enforced (which is now disabled).

Any help or guidance would be appreciated.

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-05-09T00:49:10.8933333+00:00

Hi @Stefan Vestin ,

Thanks for your post! To clarify, are you saying that the error message is showing that one user is still using legacy MFA, and that this user is not the same user who is excluded from the CA policy? Typically this conflict can occur if there is a legacy policy that is still active and conflicting with the new policy.

Could you please share the exact error message that you are seeing?

If you manually enforce the MFA setting for that user, do you see a different result?

Note also that if you enabled your conditional access policies through an improvement action, there could be a sync issue with the secure score service.

Your answer

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-05-09T00:49:10.8933333+00:00

Hi @Stefan Vestin ,

Thanks for your post! To clarify, are you saying that the error message is showing that one user is still using legacy MFA, and that this user is not the same user who is excluded from the CA policy? Typically this conflict can occur if there is a legacy policy that is still active and conflicting with the new policy.

Could you please share the exact error message that you are seeing?

If you manually enforce the MFA setting for that user, do you see a different result?

Note also that if you enabled your conditional access policies through an improvement action, there could be a sync issue with the secure score service.

Share via

MFA Secure Score not showing completed with Conditional Access applied

Your answer