TaranR.52795 (Customer) asked a question.
Report for customers who have removed themselves from MFA enrollment
Is there a report that helps to show all customers who haven't just enrolled in MFA, but have also who have un-enrolled?
I understand you can take two reports (MFA Usage & Password Health) to get who has never enrolled into MFA. However, in the scenarios where people may turn off MFA enrolment (either by removing MFA themselves or by a call into a help centre to do it on their request), it doesn't seem that, that information is able to be found out.
Thanks for any help provided.
Hi @TaranR.52795 (Customer),
Thank you for posting on the Okta community page!
I have done some research but unfortunately it seems that an MFA report, based on which user un-enrolled, is not currently supported, therefore if you would like to see such functionality I would recommend to submit a feature request. The best way to file a feature request would be from the community site.
Once feature requests are submitted they are visible to other Okta admins, who can vote on them to provide more visibility. Using this method will allow you to maintain visibility on your feature requests throughout the process.
Additionally, you could leverage the system logs to find which users un-enrolled by using the following search expressions: eventType eq "user.mfa.factor.deactivate" or eventType eq "user.mfa.factor.reset_all"
On another note, the Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.