Forum Discussion
Denise Child
Feb 09, 2017Iron Contributor
Secure Score - User alternate contact info is completed for all users
"We found that you have 5 accounts that do not have completed information."
It says it wants an alternate email address or cell phone number.
When I run the powershell command Get-MSOLUser to find AlternateEmailAddresses and MobilePhone none of this matches 5.
We have 13 accounts with Alternate Email and 6 with both Alternate Email and Cell Phone.
The rest of our 500+ Users have not filled in this information.
How do I resolve this?
Thanks,
Denise
If those are the email/phone used for SSPR and MFA, they are not necessarily visible with PowerShell. In any case Brandon Koeller should be able to give proper answer.
- Denise ChildIron Contributor
Here is the quick command I used with AAD Powershell just to see if I could find something.
Get-MsolUser -All | Sort DisplayName | Select-Object FirstName,LastName,DisplayName,UserPrincipalName,IsLicensed,*AlternateEmailAddresses,*MobilePhone | out-gridview
Not sure what else to look for since it doesn't specify.
Denise
I know which attributes you are referring to, however the ones actually used by SSPR/MFA might be the authenticationphone/authentication that even admins cannot see (via PowerShell). Check here for more info: https://blogs.technet.microsoft.com/enterprisemobility/2014/12/03/improved-privacy-for-azure-ad-mfa-and-password-reset-phone-numbers/