0 votes

We utilize Azure AD as well as Azure MFA for our VPN and we have instances where the MFA needs to be reset (essentially revoked then require to re-register). This link shows basically what we need to do.

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userdevicesettings

Currently only our sysadmins can do this, but we would like to extend this to our Helpdesk techs which unfortunately requires giving full access to Azure AD. We would like to leverage Adaxes for this, but not sure if it is possible or how it would be done.

by (130 points)

1 Answer

0 votes
by (216k points)

Hello,

It can be done using the Reset MFA script from the following article in our repository: https://www.adaxes.com/script-repository/enabledisable-multi-factor-authentication-for-a-user-in-office-365-s544.htm.

0

Thank you. Do we need to modify this script in any way or customize for our company? I am assuming it pulls the credentials from the service account automatically to access 0365 and "adm-O365ObjectId" will grab the username automatically?

0

Hello,

You are right, there is no need to modify the script.

0

Apologies for all the additional questions, do I need to register the 0365 Tenant for this or do I just need to install the Microsoft Azure Active Directory Module.

Was looking at this documentation and it looks to be way more than we need for what we are trying to do.

https://www.adaxes.com/tutorials_ActiveDirectoryManagement_ManageAndAutomateOffice365.htm#automation

0

Hello,

Apologies for all the additional questions, do I need to register the 0365 Tenant for this or do I just need to install the Microsoft Azure Active Directory Module.

The Office 365 tenant should be registered in Adaxes and associated with the users the Custom Command is supposed to be executed on.

Was looking at this documentation and it looks to be way more than we need for what we are trying to do.

Unfortunately, the approach described in the tutorial cannot be used for managing Office 365 MFA. Currently, in Adaxes it can be done only using PowerShell scripts. If you need to delegate permissions to execute specific scripts, the scripts should be specified in Custom Commands and the delegates should have permissions to execute the commands. For information on how to delegate the permissions, please, have a look at the following tutorial: https://www.adaxes.com/tutorials_DelegatingPermissions_GrantRightsToExecuteCustomCommands.htm.

0

So the tenant does need to be registered, but how it is done is different from the online documentation? What would be the procedure for my purposes?

0

Hello,

The tenant needs to be registered as described in the Manage and Automate Office 365 tutorial. The data specified during tenants registration is used by Adaxes for interaction with Office 365. The scripts from the Manage multi-factor authentication for a user in Office 365 page use the same data.

To manage MFA via Adaxes, you will need to register your tenant in Adaxes, install Microsoft Azure Active Directory Module on the computers where Adaxes service runs, add the scripts from our repository to the relevant Custom Commands, grant permissions to execute the commands over the necessary users.

Related questions

0 votes
1 answer

Hi When reading the REST API documentation it does not mention working directly against Azure AD and Exchange Online. Will this be added? Thanks /Peter Sonander

asked Jan 26, 2023 by Sonander (40 points)
0 votes
1 answer

We are looking to use Adaxes to create and manage Managed Service Accounts in the "Managed Service Accounts" OU. Is this possible through Adaxes? Thank you.

asked Nov 14, 2019 by lgibbens (320 points)
0 votes
1 answer

We are trying to extend our Adaxes management to O365 / Azure only user objects. Currently we use employee type to add traditional active directory accounts to business units and ... so, can this be used to create dynamic mail enabled security groups in O365?

asked May 3, 2022 by adaxes_user2 (40 points)
0 votes
1 answer

we've migrated over to Application ID authentication...can this be updated to utilize this instead?

asked Oct 21, 2021 by jlaquatra (20 points)
0 votes
1 answer

In order to add a managed domain does it have to be trusted by the primary domain adaxes is installed an running in? I have set up a domain for testing adaxes and it ... I have set my host file to point the untrusted domain to it's primary Domain Controller.

asked Oct 5, 2022 by mightycabal (1.0k points)
3,346 questions
3,047 answers
7,782 comments
544,982 users