MFA Failures Audit Report

Note:

The information in the MFA Failures Audit report was previously available as the Identity Verification Failures Report. You can migrate the existing data from the Identity Verification Failures Report to the new MFA Failures Report to consolidate and display all the MFA failure entries from all configured domains.

Click here for the migration steps.

The MFA Failures Audit Report displays details of every failed MFA attempt, such as the username, time of the MFA attempt, the policy the user is assigned to, the time of MFA failure, the endpoint type MFA was attempted from, the number of MFA attempts, the IP address of the machine, and the type of MFA attempted.

This information helps administrators handle security risks like brute-force and dictionary attacks.

Report generation

You can generate the Identity Verification Failures Report by following these steps:

  1. Log into the ADSelfService Plus admin portal with Admin or Operator privileges and navigate to Reports > MFA Reports > MFA Failures Audit Report.
  2. Specify the domain in which to search using the Select Domain option.
  3. Specify OUs (if necessary) using the Select OUs option.
  4. The Period drop-down menu can be used to specify the period for which you want to generate reports. Options include Today, Yesterday, Last 7 days, Last 30 days, This month, and Custom Period.
  5. Click Generate.

Report customization

Sorting

Click any of the column headers (except the Status and Authenticator columns) to view the report's entries in ascending or descending order.

Advanced Filtering

Searching

Schedule Reports, Export As and More

Migrating to the MFA Failures Audit Report

Existing information from the Identity Verification Failures Report can be migrated to the MFA Failures Audit Report to receive a single, unified view of MFA failure incidents across all the domains configured in ADSelfService Plus.

Migration can be performed by domain-based super admins as well as product-based super admins. If a domain-based super-admin migrates data from the Identity Verification Failures report to the MFA Failures Audit Report, all the MFA failure records across all configured domains will be migrated.

Note: Only the Identity Verification Failure audit data for the last three months will be migrated to the MFA Failures Audit Report.

To migrate existing information from the Identity Verification Failures Report to the MFA Failures Audit Report,

  1. Log into ADSelfService Plus with super admin credentials and navigate to Reports > MFA Reports > MFA Failures Audit Report.
  2. Click the Identity Verification Failure Report link at the top-right of the report.
  3. The Identity Verification Failures report will load. Click Migrate Now at the top-right of the report.
  4. Click Migrate Now in the pop-up that is displayed.

Your data will now be migrated to the new MFA Failures Report.

Note: The Identity Verification Failure Report can be viewed by clicking the Identity Verification Failure link at the right of the MFA Failures Audit Report. This link will be displayed as long as the data used to populate the report exists. However, if the older data gets erased, the Identity Verification Failure link will not be displayed.

Thanks!

Your request has been submitted to the ADSelfService Plus technical support team. Our technical support people will assist you at the earliest.

 

Need technical assistance?

  • Enter your email ID
  • Talk to experts
  •  
     
  •  
  • By clicking 'Talk to experts' you agree to processing of personal data according to the Privacy Policy.

Don't see what you're looking for?

  •  

    Visit our community

    Post your questions in the forum.

     
  •  

    Request additional resources

    Send us your requirements.

     
  •  

    Need implementation assistance?

    Try onboarding

     

Copyright © 2024, ZOHO Corp. All Rights Reserved.