Enable multifactor authentication for your tenant by 15 October 2024

Lukas Smith 25

I received an email with:

<< Action required: Enable multifactor authentication for your tenant by 15 October 2024

_You’re receiving this email because you’re a global administrator for XXX >>
(where XXX is a UUID)

But I have no clue what XXX relates to. I looked at all of my directory and Microsoft Entra ID's I could find and none of them match XXX. So I am not really sure what to do here._

Richard Cheney 0 Reputation points Microsoft Employee

2024-08-19T08:43:31.6333333+00:00

It is the tenantId for your Microsoft Entra ID directory, also known as the Directory ID. If you authenticate to the Azure portal using the email address they sent the email to then you should see the Directory ID in the table of directories you can switch to.
Lukas Smith 25 Reputation points

2024-08-19T08:52:58+00:00

That is the issue. I checked the tenant ID for Microsoft Entra ID for all 4 of our directories and none match the supplied ID. The email matches our main directory.
Lukas Smith 25 Reputation points

2024-08-19T09:23:07.91+00:00

That is the issue. I checked all of our directories and verified that in none of them the tenant ID of the Microsoft Entra ID service matches the UUID I received in the email.
Raja Pothuraju 47,640 Reputation points Microsoft Employee Moderator

2024-08-20T16:01:09.0133333+00:00

Hello @Lukas Smith,

Thank you for posting your query on Microsoft Q&A.

I see that you received an email regarding MFA enforcement, and the email mentioned an incorrect tenant ID: "You’re receiving this email because you’re a global administrator for <tenantID>."

It seems you've already verified all four of your directories, but none of them match the GUID in the email.

Please note that the email notification is sent only to global administrators of the specific directory in question.

One possible explanation is that your user account might have been added as a guest user in that directory with an active global administrator role.

To verify if you are part of that directory, I recommend checking in the Azure Portal by navigating to Settings > Directories + subscriptions. Select All Directories and see if that tenant ID appears. You can refer to the screenshot below for guidance.

Switch and manage directories

If it still doesn’t match with any directory, I recommend discussing the situation with the other global administrators in your tenant. Check if any other users with an active global administrator role received a similar email. Did their email mention a different tenant ID, or did it correctly show the actual tenant ID associated with your organization?

Thanks,
Raja Pothuraju.
Lukas Smith 25 Reputation points

2024-08-21T09:03:08.46+00:00

Good call on checking with other global admins. So the other global admin did get a different ID. One that matches our main directory, which is what I would have expected to have found in the email to me as well. So then what does this mean? Was there potentially a bug in the email send to me which resulted in the wrong GUID being included in the email? If so, how can I figure this out?
Raja Pothuraju 47,640 Reputation points Microsoft Employee Moderator

2024-08-21T20:00:05.0666667+00:00

Hi @Lukas Smith,

Thank you for confirming this with the other global admins.

To determine if the issue is only with the email notification, please note that Azure MFA enforcement notifications are delivered through multiple channels, including email, Service Health notifications, Portal notifications, and the Microsoft 365 Message Center. We can verify this by checking the GUID in the Azure Portal notification blade to confirm if the incorrect GUID is only sent via email.

To do this, please log in using the following URL with the same user account. Once you click the link, it will take you to the Grace Period Request page, where you can see the tenant ID from the Portal. Please refer to the screenshot below.

Link: https://aka.ms/managemfaforazure

Check the tenant ID in the Azure Portal to see if it displays the correct directory GUID.

Thanks,
Raja Pothuraju.
Raja Pothuraju 47,640 Reputation points Microsoft Employee Moderator

2024-08-26T11:30:45.25+00:00

@Lukas Smith,

Just following up to check if you were able to see the correct tenant ID from the Azure Portal. Let me know if you need any further assistance!
Lukas Smith 25 Reputation points

2024-08-26T11:35:16.6733333+00:00

The GUID shown does not match the one from the email I received, it does match the email from the email by follow global admin received.

For now I will just wait if I will receive another email.
Raja Pothuraju 47,640 Reputation points Microsoft Employee Moderator

2024-08-28T02:18:59.5766667+00:00

@Lukas Smith,

Thank you for confirming the Azure Portal GUID.

This allowed us to confirm that the email notification came with a different tenant ID than your main tenant ID.

As mentioned, let's wait for another email notification to be triggered and check if the tenant ID in the second notification matches your home directory. If it doesn't, please let me know.

Thanks, Raja Pothuraju.

Your answer