Report Suspicious Activity & Fraud Alert for Azure MFA

Thu, 04 May 2023 12:41:33 +0000

A new feature popped up in Azure AD. Well, not entirely new, I must say. Reading from the docs, Report Suspicious Activity is an enhancement of the Fraud Alert feature that has existed for quite some time.

Until now, administrators could enable Fraud Alert for Azure MFA so that users could report when suspicious MFA prompts are received. Users who reported fraud could be automatically blocked so they could no longer sign in. As this is a good feature, it kills productivity, as the intervention of an admin can only remediate the user. This admin would then need to unblock the user and ensure the user’s identity was secured.

Fraud Alert on JanBakker.tech

Report Suspicious Activity & Fraud Alert for Azure MFA