How to revoke MFA sessions when user is deprovision?

We are in process of implementing the enforcement of MFA everywhere and would like to add in the deprovision process that we revoke all MFA sessions for that user.

by (20 points)

1 Answer

by (309k points)
0 votes

Update template:

Update 2026

Starting from Adaxes 2026.1, there is built-in functionality for resetting MFA in Microsoft 365. For details, have a look at section Resetting MFA in Microsoft 365 of the corresponding What's New article.

Original

Hello,

Unfortunately, there is no such built-in functionality in Adaxes. The feature is planned for one of the future releases. As of now, it can only be done using a script, but we do not have anything in our repository.

Related questions

Is it possible to restrict the number of user sessions to the Web Interface?

I'd like to limit users from being able to login to the Web interface. In other words, if a user opens multiple browsers or tabs, can I prevent them from being able to login to each tab/browser and starting multiple sessions? Thanks!

asked Apr 10, 2024 by cewilson (300 points)
0 votes
1 answer
How can I get this to trigger properly when a new user is created by script?

The rule runs but since the first name and last name are passed as parameters, I only get the sequential # as a userID without the initials.

asked Oct 24, 2024 by curtisa (350 points)
0 votes
1 answer
Does the Deactivate M365 Account command also revoke active sessions?

When Adaxes runs the command "Deactivate Microsoft 365 account of the user: set Sign-In status to 'Blocked', revoke all licenses" also revoke the sessions in Azure? For reference, it is the "Revoke sessions" button in the Azure portal:

asked Nov 22, 2024 by jmatthews (270 points)
0 votes
1 answer
How to I delegate Send As permission and Full Access permission to a defined user during Deprovision?

Using the built in 'Deprovision' Custom Command, I would like the person that is trying to Deprovision a user (Help Desk member) be asked who (from a list of existing active ... to leave the question 'blank', which means that no one gets access to the mailbox.

asked Apr 22, 2020 by RayBilyk (310 points)
0 votes
1 answer
Is it Possible to execute Deprovision User on Set Date?

I would like the HR to be able to set the date of deprovision User. So that it's executed on set date and not on command. I Tryed with parameter (Date/Time picker) ... it possible with custom command or do i have to make Scheduled Task with (Date/time picker)?

asked Jan 20, 2021 by Sandberg94 (340 points)
0 votes
1 answer