starred/CIPP
1
0
Fork 0
mirror of https://github.com/KelvinTegelaar/CIPP.git synced 2026-04-25 16:26:09 +03:00
Code Issues 20 Projects Releases 5 Packages Wiki Activity

[GH-ISSUE #4719] [Bug]: “no MFA” alert Webhook for external users #2196

New issue
Closed
opened 2026-03-02 13:50:23 +03:00 by kerem · 5 comments
kerem commented 2026-03-02 13:50:23 +03:00
Owner
Copy link

Originally created by @th0mas137 on GitHub (Sep 29, 2025).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/4719

Required confirmations before submitting

  • I can reproduce this issue on the latest released versions of both CIPP and CIPP-API.
  • I have searched existing issues (both open and closed) to avoid duplicates.
  • I am not requesting general support; this is an actual bug report.

Issue Description

We’re receiving a constant “no MFA” alert from CIPP into our HaloPSA (CRM) via webhook.
This works perfect!

However, we can’t enable MFA for external users that come through the cross-tenant integration in Microsoft.

Example alert:

The following 1157 users do not have MFA registered:
18101_svxxx.se#EXT#@domain.onmicrosoft.com,
18102_svxxxse#EXT#@domain.onmicrosoft.com,
18103_svxxxx.se#EXT#@domain.onmicrosoft.com, ...

Question: Disable No MFA alert for external cross-tenant users.

Environment Type

Sponsored (paying) user

Front End Version

8.4.2

Back End Version

8.4.2

Relevant Logs / Stack Trace
Originally created by @th0mas137 on GitHub (Sep 29, 2025). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/4719 ### Required confirmations before submitting - [x] **I can reproduce this issue on the latest released versions** of both CIPP and CIPP-API. - [x] **I have searched existing issues** (both open and closed) to avoid duplicates. - [x] I am **not** requesting general support; this is an actual bug report. ### Issue Description We’re receiving a constant “no MFA” alert from CIPP into our HaloPSA (CRM) via webhook. This works perfect! However, we can’t enable MFA for external users that come through the cross-tenant integration in Microsoft. Example alert: The following 1157 users do not have MFA registered: 18101_svxxx.se#EXT#@domain.onmicrosoft.com, 18102_svxxxse#EXT#@domain.onmicrosoft.com, 18103_svxxxx.se#EXT#@domain.onmicrosoft.com, ... Question: Disable No MFA alert for external cross-tenant users. ### Environment Type Sponsored (paying) user ### Front End Version 8.4.2 ### Back End Version 8.4.2 ### Relevant Logs / Stack Trace ```plaintext ```
kerem 2026-03-02 13:50:23 +03:00
  • closed this issue
  • added the
    bug
         label
kerem commented 2026-03-02 13:50:24 +03:00
Author
Owner
Copy link

@github-actions[bot] commented on GitHub (Sep 29, 2025):

Thank you for reporting a potential bug. If you would like to work on this bug, please comment:

I would like to work on this please!

Thank you for helping us maintain the project!

<!-- gh-comment-id:3346692748 --> @github-actions[bot] commented on GitHub (Sep 29, 2025): Thank you for reporting a potential bug. If you would like to work on this bug, please comment: > I would like to work on this please! Thank you for helping us maintain the project!
kerem commented 2026-03-02 13:50:24 +03:00
Author
Owner
Copy link

@PeterVive commented on GitHub (Sep 29, 2025):

Are the users "members" of your tenant, or guest users?
Because the alert should only be including users with userType 'member'.

<!-- gh-comment-id:3346741226 --> @PeterVive commented on GitHub (Sep 29, 2025): Are the users "members" of your tenant, or guest users? Because the alert should only be including users with userType 'member'.
kerem commented 2026-03-02 13:50:24 +03:00
Author
Owner
Copy link

@PeterVive commented on GitHub (Sep 29, 2025):

And just to confirm, is it this alert you have configured?

Image
<!-- gh-comment-id:3346751203 --> @PeterVive commented on GitHub (Sep 29, 2025): And just to confirm, is it this alert you have configured? <img width="717" height="123" alt="Image" src="https://github.com/user-attachments/assets/6f3da4bb-d057-4384-9498-833a20c78ee4" />
kerem commented 2026-03-02 13:50:24 +03:00
Author
Owner
Copy link

@Zacgoose commented on GitHub (Sep 29, 2025):

hmm okay yea what userType do they show as in CIPP, I'm guessing it's not Guest then

<!-- gh-comment-id:3347835766 --> @Zacgoose commented on GitHub (Sep 29, 2025): hmm okay yea what userType do they show as in CIPP, I'm guessing it's not Guest then
kerem commented 2026-03-02 13:50:24 +03:00
Author
Owner
Copy link

@KelvinTegelaar commented on GitHub (Oct 17, 2025):

Fixed in dev

<!-- gh-comment-id:3414258042 --> @KelvinTegelaar commented on GitHub (Oct 17, 2025): Fixed in dev
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
docs
dev
dependabot/npm_and_yarn/dev/uiw/react-json-view-2.0.0-alpha.42
dependabot/npm_and_yarn/dev/tanstack/react-query-persist-client-5.96.2
dependabot/npm_and_yarn/dev/mui-tiptap-1.30.0
dependabot/npm_and_yarn/dev/tanstack/react-query-devtools-5.96.2
dependabot/npm_and_yarn/dev/recharts-3.8.1
dependabot/github_actions/dev/actions/setup-node-6.4.0
copilot/add-alert-for-report-only-ca
release/beta
release/nightly
docs-maintenance
v10.4.0
v10.3.0
v10.2.0
v10.1.0
v10.0.0
v8.8.0
v8.7.0
v8.6.0
v8.5.0
v8.4.0
v8.3.0
v8.2.0
v8.1.0
v8.0.0
v7.5.0
v7.4.0
v7.3.0
v7.2.0
v7.1.0
v7.0.1
v6.4.0
v6.3.0
v6.2.0
v6.1.0
v6.0.0
v5.9.0
v5.8.5
v5.8.0
v5.7.0
v5.6.0
v5.5.0
v5.4.0
v5.3.0
v5.2.0
v5.1.0
v5.0.0
v4.9.0
v4.8.0
v4.7.0
v.4.6.0
v4.5.0
v4.4.0
v4.3.0
v4.2.0
v4.1.0
v4.0.0
v3.8.0
v3.7.0
v3.6.0
v3.5.0
v3.4.0
v3.3.0
v3.2.0
v3.1.0
v3.0.0
v2.20.0
v2.19.0
v2.18.0
v2.17.0
v2.16.0
v2.15.0
v2.13.0
v2.12.0
v2.11.2
v2.1.11.0
v.2.10.0
v2.9.0
v2.8.0
v2.7.0
v2.6.0
v2.5.5
v2.5.0
v2.4.0
v.2.3.0
v2.2.0
v2.1.2
v2.1.1
v2.1.0
v2.0.1
2.0.0
v1.5.1
v1.5.0
v1.4.3
v1.4.2
v1.4.0
v1.3.0
v1.2.1
v1.2.0
1.1.0
release
Labels
Clear labels   
API

   
Feature

   
NotABug

   
NotABug

   
Planned

   
Sponsor Priority

   
Sponsor Priority

   
bug

   
documentation

   
duplicate

   
enhancement

   
needs more info

   
no-activity

   
no-priority

   
not-assigned

   
pull-request

Mirrored from GitHub Pull Request

  
react-conversion

   
react-conversion

   
roadmap

   
security

   
stale

   
unconfirmed-by-user

   
unconfirmed-by-user

   
wontfix
No labels
API
Feature
NotABug
NotABug
Planned
Sponsor Priority
Sponsor Priority
bug
documentation
duplicate
enhancement
needs more info
no-activity
no-priority
not-assigned
pull-request
react-conversion
react-conversion
roadmap
security
stale
unconfirmed-by-user
unconfirmed-by-user
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/CIPP#2196
No description provided.