Entra - Block unblock users missing for global admin

Question

Since yesterday, under Multifactor authentication in both Entra and Azure portal, the Block/unblock users & Account lockout are missing.

They are present in the Favorites section but greyed out and can't be clicked.

What could cause this ?

Have they moved?

Thank you.

Answer 1

Hello @vcsa ,

As part of the Microsoft Secure future initiative, Microsoft is retiring specific legacy multi-factor authentication (MFA) settings\features in Entra ID. These include:

1. MFA fraud Alert
2. Block/unblock users

To replace MFA Fraud Alert and Block/unblock users you can use Report suspicious activity to allow users to report fraudulent verification requests. These alerts are integrated with Identity Protection and allow for a more comprehensive block functionality than what was available with Block/unblock users. Users who report an MFA prompt as suspicious are set to High User Risk.

If you have a P2 license, you can use risk-based conditional access policies to automatically limit access for these users or require them to change their password.

If you have a P1 license, you can use risk detection events to manually identify and disable impacted users or set up custom workflows. To learn more about investigating and remediating risk, refer to the following documentations: How to: Investigate Risk , How to: Remediate risk detections and unblock

For additional information and configuration please follow the documentation to replace the MFA Fraud Alert and Block/unblock users: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-mfasettings#report-suspicious-activity

Hope this helps let us know if you have any additional queries happy to assist you further.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.