[GH-ISSUE #4635] [Feature Request]: Add reporting into tenant's Authentication Methods Migration State #2144

Closed
opened 2026-03-02 13:49:58 +03:00 by kerem · 3 comments
Owner

Originally created by @HappyEarthDay on GitHub (Sep 12, 2025).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/4635

Please confirm:

  • I have searched existing feature requests (open and closed) and found no duplicates.
  • **me or my organization is currently an active sponsor of the product at the $99,- level.

Problem Statement

Duplicate of [Feature Request]: Add reporting into tenant's Authentication Methods Migration State #3727

We want some way in the CIPP interface and CIPP API to see if the current phase of Entra Authentication Methods Migration. Not having this visibility hurts our ability to support a large client base.

This would be especially helpful for the Sept 30 migration to the new MFA methods
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-methods-manage#authentication-methods-policy:~:text=In%20March%202023,the%20deprecation%20date.

Benefits for MSPs

Having visibility into all our clients' tenants could help us easily go through each one that is in an undesired state and perform the migration.

Value or Importance

The different MFA implementations (legacy vs Entra-managed) can be difficult to support, so helping our MSP to standardize all clients on a fully complete the auth methods migration would drastically help our support staff to help find MFA issues faster.

PowerShell Commands (Optional)

This command works to get the Auth Migration state for a tenant
Get-CIPPGraphRequest -CustomerTenantId $($tenant.customerId) -GraphEndpoint /policies/authenticationMethodsPolicy'

Originally created by @HappyEarthDay on GitHub (Sep 12, 2025). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/4635 ### Please confirm: - [x] **I have searched existing feature requests** (open and closed) and found no duplicates. - [x] **me or my organization is currently an active sponsor of the product at the $99,- level. ### Problem Statement **Duplicate of [Feature Request]: Add reporting into tenant's Authentication Methods Migration State #3727** We want some way in the CIPP interface and CIPP API to see if the current phase of Entra Authentication Methods Migration. Not having this visibility hurts our ability to support a large client base. **This would be especially helpful for the Sept 30 migration to the new MFA methods** https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-methods-manage#authentication-methods-policy:~:text=In%20March%202023,the%20deprecation%20date. ### Benefits for MSPs Having visibility into all our clients' tenants could help us easily go through each one that is in an undesired state and perform the migration. ### Value or Importance The different MFA implementations (legacy vs Entra-managed) can be difficult to support, so helping our MSP to standardize all clients on a fully complete the auth methods migration would drastically help our support staff to help find MFA issues faster. ### PowerShell Commands (Optional) This command works to get the Auth Migration state for a tenant ```Get-CIPPGraphRequest -CustomerTenantId $($tenant.customerId) -GraphEndpoint /policies/authenticationMethodsPolicy' ```
Author
Owner

@Zacgoose commented on GitHub (Sep 14, 2025):

There is a standard for this so you should just be able to slap that into report mode!

<!-- gh-comment-id:3289146525 --> @Zacgoose commented on GitHub (Sep 14, 2025): There is a standard for this so you should just be able to slap that into report mode!
Author
Owner

@KelvinTegelaar commented on GitHub (Sep 14, 2025):

Setting the standard to report mode is this fix for this :)

<!-- gh-comment-id:3289442950 --> @KelvinTegelaar commented on GitHub (Sep 14, 2025): Setting the standard to report mode is this fix for this :)
Author
Owner

@HappyEarthDay commented on GitHub (Sep 14, 2025):

Setting the standard to report mode is this fix for this :)

We have this set, but where can we see it or export it for all tenants in the UI?

<!-- gh-comment-id:3289874631 --> @HappyEarthDay commented on GitHub (Sep 14, 2025): > Setting the standard to report mode is this fix for this :) We have this set, but where can we see it or export it for all tenants in the UI?
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/CIPP#2144
No description provided.