Share via

User blocked in MFA, where is the reason logged?

Andrew Brehm 61 Reputation points
2021-11-15T11:55:48.887+00:00

When an MFA administrator blocks a user and gives a reason in the web interface, where is that action logged and where can I later find the reason?

Similarly when the user is being unblocked and a reason given, where would I find that event and the reason?

It's not in the normal MFA logs apparently.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,729 questions
0 comments
Accepted answer
  1. Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee
    2021-11-15T23:01:44.43+00:00

    Search for Multi-factor authentication in the toolbar and select it. Then, in the "Block/unblock users" section, you should see the list of blocked users along with the Replication group, User, Reason, Date, and Action.

    149480-image.png

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. IAMUser 6 Reputation points
    2022-09-01T16:54:58.847+00:00

    I have the opposite. Where is the reason logged after unblocking. When unblocking a user, it ask to give a reason. I normally put a case number. Where is that kept to review past unblocking reasons?

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.