Home

Enable MFA with AzureAD Module V2

%3CLINGO-SUB%20id%3D%22lingo-sub-266837%22%20slang%3D%22en-US%22%3EEnable%20MFA%20with%20AzureAD%20Module%20V2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266837%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20written%20a%20lot%20of%20Powershell%20scripts%20to%20automate%20and%20report%20Office%20365%2FAzure%20in%20the%20last%20couple%20of%20years.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%20I'm%20in%20the%20process%20of%20re-writing%20some%20of%20them%20to%20utilize%20the%20new%20AzureAD%20v2%20module%20instead%20of%20the%20old%20MSOL%20module.%3C%2FP%3E%3CP%3EWhih%2C%20I%20think%2C%20will%20be%20deprecated%20soon%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20of%20the%20benefits%20of%20this%20will%20be%20that%20will%20will%20be%20able%20to%20enable%20MFA%20on%20ALL%20admin%20accounts.%3C%2FP%3E%3CP%3EThe%20only%20thing%20that's%20holding%20me%20back%20is%20the%20fact%20that%20I%20can't%20figure%20out%20how%20to%20enable%20MFA%20with%20the%20new%20AzureAD%20module.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOur%20user%20provisioning%20script%20will%20enable%20MFA%20for%20all%20new%20users.%3C%2FP%3E%3CP%3EWith%20the%20old%20MSOL%20cmdlets%20it%20is%20a%20piece%20of%20cake.%20But%20how%20to%20do%20it%20with%20AzureAD%20Module%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-266837%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAccess%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-353501%22%20slang%3D%22en-US%22%3ERe%3A%20Enable%20MFA%20with%20AzureAD%20Module%20V2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-353501%22%20slang%3D%22en-US%22%3EThanks%20anyways%2C%20hopefully%20Microsoft%20adds%20this%20feature%20soon.%20I%20even%20looked%20into%20the%20%22AzureADPreview%22%20module%2C%20but%20I%20don't%20see%20anything%20about%20MFA%20mentioned%20in%20it%20either.%20I%20guess%20I'll%20just%20use%20the%20old%20msonline%20module%20in%20the%20meantime.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-353494%22%20slang%3D%22en-US%22%3ERe%3A%20Enable%20MFA%20with%20AzureAD%20Module%20V2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-353494%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20idea%2C%20we%20haven't%20heard%20any%20updates%20about%20this%20lately%20%3A%5C%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-353478%22%20slang%3D%22en-US%22%3ERe%3A%20Enable%20MFA%20with%20AzureAD%20Module%20V2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-353478%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BSorry%20to%20bother%20you%2C%20but%20is%20there%20any%20ETA%20on%20when%20this%20new%20API%20will%20be%20released%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%2C%20for%20reference%20there%20are%20many%20users%20including%20myself%20that%20would%20also%20like%20to%20be%20notified%20when%20this%20functionality%20becomes%20available%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F10926%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F10926%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-267041%22%20slang%3D%22en-US%22%3ERe%3A%20Enable%20MFA%20with%20AzureAD%20Module%20V2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-267041%22%20slang%3D%22en-US%22%3E%3CP%3ENot%20possible%20yet%2C%20but%20once%20they%20release%20the%20new%20MFA%20API%2C%20it%20should%20also%20be%20part%20of%20the%20Azure%20AD%20module.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-462782%22%20slang%3D%22en-US%22%3ERe%3A%20Enable%20MFA%20with%20AzureAD%20Module%20V2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-462782%22%20slang%3D%22en-US%22%3E%3CP%3EOne%20year%20later%20and%20still%20no%20possibility%20to%20enable%20MFA%20with%20the%20new%20module.%3C%2FP%3E%3CP%3EMSOnline%20is%20depricated.%20I%20do%20want%20to%20move%20to%20the%20new%20module%2C%20but%20unfortunately%20not%20yet%20possible.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThere%20is%20this%20case%20on%20Github%20which%20they%20closed%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F10926%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F10926%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20here%20is%20a%20Uservoice%20you%20can%20vote%20on%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%2Fsuggestions%2F36816202-set-mfa-using-azure-active-directory-powershell-mo%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Ffeedback.azure.com%2Fforums%2F169401-azure-active-directory%2Fsuggestions%2F36816202-set-mfa-using-azure-active-directory-powershell-mo%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-462980%22%20slang%3D%22en-US%22%3ERe%3A%20Enable%20MFA%20with%20AzureAD%20Module%20V2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-462980%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F9558%22%20target%3D%22_blank%22%3E%40Aldin%20Turcinovic%3C%2FA%3E%26nbsp%3B%20I%20see%20in%20the%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FAzure-Active-Directory%2FApril-2019-Azure-AD-Deployment-Webinars%2Fm-p%2F420349%23M2753%22%20target%3D%22_self%22%3EApril%202019%20webinar%3C%2FA%3E%20that%20there%20is%20a%20section%20titled%20%22Secure%20Your%20Identities%20with%20Azure%20Active%20Directory%20and%20Multi%20Factor%20Authentication%22.%20Maybe%20they%20will%20also%20address%20the%20Powershell%20module%2C%20though%20I'm%20not%20holding%20my%20breath.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Aldin Turcinovic
Occasional Contributor

Hi there,

 

I have written a lot of Powershell scripts to automate and report Office 365/Azure in the last couple of years.

 

Now I'm in the process of re-writing some of them to utilize the new AzureAD v2 module instead of the old MSOL module.

Whih, I think, will be deprecated soon?

 

One of the benefits of this will be that will will be able to enable MFA on ALL admin accounts.

The only thing that's holding me back is the fact that I can't figure out how to enable MFA with the new AzureAD module.

 

Our user provisioning script will enable MFA for all new users.

With the old MSOL cmdlets it is a piece of cake. But how to do it with AzureAD Module?

 

Thanks

6 Replies

Not possible yet, but once they release the new MFA API, it should also be part of the Azure AD module.

@Vasil Michev Sorry to bother you, but is there any ETA on when this new API will be released?

 

Also, for reference there are many users including myself that would also like to be notified when this functionality becomes available: https://github.com/MicrosoftDocs/azure-docs/issues/10926

No idea, we haven't heard any updates about this lately :\

Thanks anyways, hopefully Microsoft adds this feature soon. I even looked into the "AzureADPreview" module, but I don't see anything about MFA mentioned in it either. I guess I'll just use the old msonline module in the meantime.

One year later and still no possibility to enable MFA with the new module.

MSOnline is depricated. I do want to move to the new module, but unfortunately not yet possible.

 

There is this case on Github which they closed:

https://github.com/MicrosoftDocs/azure-docs/issues/10926

 

And here is a Uservoice you can vote on:

https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/36816202-set-mfa-using-a...

@Aldin Turcinovic  I see in the April 2019 webinar that there is a section titled "Secure Your Identities with Azure Active Directory and Multi Factor Authentication". Maybe they will also address the Powershell module, though I'm not holding my breath.

Related Conversations
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies