MFA Monitor Alerts

Question

MFA Monitor Alerts

Laxson Paradza 20

Hi

I am trying to create Alerts whenever someone signs in without MFA, I have been looking at Azure Monitor Alerts and i can see some Alerts for other resources but not for EntraID, i am wondering if anyone has done this in any other way.

Thank you

AnuragSingh-MSFT 21,566 Reputation points Moderator

2023-12-04T04:06:28.4+00:00

Laxson Paradza, Following-up to check if you had a chance to review the answer provided.

If the answer did not help, please add more context/follow-up question for it, and we will help you out. Else, if the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.
JamesTran-MSFT 37,226 Reputation points Microsoft Employee Moderator

2023-12-05T20:31:46.6766667+00:00

@Laxson Paradza

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

1 answer

Your answer

AnuragSingh-MSFT 21,566 Reputation points Moderator

2023-12-04T04:06:28.4+00:00

Laxson Paradza, Following-up to check if you had a chance to review the answer provided.

If the answer did not help, please add more context/follow-up question for it, and we will help you out. Else, if the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.
JamesTran-MSFT 37,226 Reputation points Microsoft Employee Moderator

2023-12-05T20:31:46.6766667+00:00

@Laxson Paradza

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

Hello, Microsoft Sentinel has a connector for Entra - this allows the right data to be collected and Rules to detect many sign in scenarios, like MFA to be run. https://learn.microsoft.com/en-us/azure/sentinel/connect-azure-active-directory
However whilst this uses Azure Monitor there are costs associated. If you just kept it to SigninLogs the costs are typically fairly minimal, and you get a free trial if that helps? https://learn.microsoft.com/en-us/azure/sentinel/billing?tabs=simplified%2Ccommitment-tiers#free-trial

Share via

MFA Monitor Alerts

1 answer

Your answer