We have high-level registration “eye-candy” graphs such as:
“How many users are registered for MFA and what method(s) are they registered for?”
“How many people are registered for SSPR (Self-Service Password Reset)?”
We also have more granular registration information available:
TIP: You can edit the Columns for your viewing pleasure.
If you select “Download,” the CSV file will have all the goods, regardless of the Column selections for the portal page/view.
Clicking over to the “Usage” tab and you’ll find helpful information there, too:
“How many people are using single-factor vs multi-factor auth?”
“How many people are using password sign-in, Windows Hello for Business, Passwordless, etc?”
A nagging question I had about Usage was “Who is using Windows Hello for Business?”
In the portal pages above, we are able to get a ‘count’ of Windows Hello for Business (WH4B) authentications, but we aren’t able to determine which specific people are using it.
Enter Jeroen and Michele.
Jeroen is a "Customer Engineer" (formerly known as a PFE, or Premier Field Engineer) – he does a lot of WH4B workshops with our enterprise customers and has picked up more than a trick or two about it.
Michele is a former PFE, and now a Program Manager in our Identity division - and he knowsIdentity.
Michele published a nifty little Workbook to GitHub for the AAD Sign-in logs that creates a three-section WH4B ‘report’ – which Jeroen has been tweaking/sharing with customers during his Workshops.
Section 1 - “Windows Hello for Business Usage – Auths per Device”
A pie chart showing each device and how many WH4B authentications to Azure AD have occurred from it
Section 2 - “Windows Hello for Business Usage – Per-Device and Per-User Authentication Counts”
A table showing each device, each user and the counts of times the user signed-in via WH4B
Section 3 - “Windows Hello for Business Usage – Global Locations of Authentications”
A map showing the general geography of the WH4B sign-ins
NOTE: The default time-frame is ‘last 30 days’ – I’ll show you how to change that in a bit
Cool, eh??! I thought so, too!
So, how do we do this?
You likely already have the pre-reqs for this, especially if you’re doing much w/ Azure AD today.