[GH-ISSUE #5448] [Feature Request]: Admin MFA alert to include users that have no tick in PU, SD or CA #2624

New issue

Open

opened 2026-03-02 13:53:50 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 13:53:50 +03:00

Owner

Originally created by @Cortec-IT on GitHub (Feb 24, 2026).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/5448

Please confirm:

I have searched existing feature requests (open and closed) and found no duplicates.
**me or my organization is currently an active sponsor of the product at the $99,- level.

Problem Statement

The current alert for admins that have no form of MFA only looks at if they have a registered method or not. There are cases where an admin has a registered method but after setup, the per user, security defaults or conditional access policy has been removed. This means the admin effectively has no MFA. Could this alert also include admins that do not have a tick in any of the MFA enforcement methods?

Benefits for MSPs

Could save someone's whole tenant from being breached...

Value or Importance

Critical, need to find admins that are at risk

PowerShell Commands (Optional)

No response

Originally created by @Cortec-IT on GitHub (Feb 24, 2026). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/5448 ### Please confirm: - [x] **I have searched existing feature requests** (open and closed) and found no duplicates. - [x] **me or my organization is currently an active sponsor of the product at the $99,- level. ### Problem Statement The current alert for admins that have no form of MFA only looks at if they have a registered method or not. There are cases where an admin has a registered method but after setup, the per user, security defaults or conditional access policy has been removed. This means the admin effectively has no MFA. Could this alert also include admins that do not have a tick in any of the MFA enforcement methods? ### Benefits for MSPs Could save someone's whole tenant from being breached... ### Value or Importance Critical, need to find admins that are at risk ### PowerShell Commands (Optional) _No response_