25,081 questions
its May 9th 2024, bummer still no answers.
Dynamic Groups MFA Status?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 90%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHR%3C/text%3E%3C/svg%3E)
H Raja
301
Reputation points
I'm trying to find out a way to populate a Dynamic Group, with users who are registered for MFA. Looking at online documents, looks like there is only limited values you can use with Dynamic Groups. If this is not possible, how do I populate a group with MFA registered users.
Microsoft Security Microsoft Entra Microsoft Entra ID
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 90%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAK%3C/text%3E%3C/svg%3E)
Anshul Kumar (MINDTREE LIMITED) 6 Reputation points2021-10-11T13:15:09.09+00:00 Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.
Sign in to comment
7 answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 74%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENR%3C/text%3E%3C/svg%3E)
Nino Renzi 0 Reputation points2024-05-09T23:15:56.5666667+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 57.99999999999999%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOA%3C/text%3E%3C/svg%3E)
Ollischer, Alexander 0 Reputation points2024-09-19T08:15:39.3233333+00:00 Hi,
have a look at this blog article: https://chrisbt.me/posts/mfa-remediation/
and subsequente at this Azure Runbook: https://github.com/M365-Consultant/EntraID-MFA-DynamicGroup
I came up with the exact same requirement and this helped we with it. Not as fancy as being able to directly query the authentication strength with a property, but it works.
Alex
Sign in to comment -
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 9%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
Jonathan Bullock 0 Reputation points2024-12-12T20:51:35.1433333+00:00 Does this solve the problem ?
https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-rule-member-of
Example:
user.memberof -any (group.objectId -in ['<Excluded Group ID>'])
-
Nino Renzi 0 Reputation points
2024-12-12T20:56:35.5166667+00:00 i dont think there is an attribute for MFA, we looked through all settings. maybe i missed something.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 35%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELG%3C/text%3E%3C/svg%3E)
Leon Graunke 0 Reputation points2024-12-13T06:32:10.45+00:00 This is the Solution for this. Worked perfect for me! https://github.com/M365-Consultant/EntraID-MFA-DynamicGroup
Sign in to comment -