ActiveDirectory mode, deactivated user about adfsmfa HOT 11 CLOSED

No, it's not a bug

Get-MFAUsers -IncludeDisabled

Enable-MFAUsers [email protected]
Disable-MFAUsers [email protected]

Best regards

from adfsmfa.

Hi

After clearing all filters i get a view entry but incomplete.
When i try to open the entry the console crashes.

from adfsmfa.

Hi,

Your User MUST have a username (UPN).
Delete it, and recreate it

Regards

from adfsmfa.

Hi

The user has a username, but it is not visible in the gui when it is disabled.

from adfsmfa.

Hi,

Yes it's good !

Enable-MfaUser ....

For the console close and reopen it.

Regards

from adfsmfa.

In ADDS Attribute msDS-cloudExtensionAttribute18
The value Must be "TRUE" or "FALSE" and not "true".

Boolean attributes in ADDS are always in uppercase.

You can also watch the EventViewer for detailled error.

Regards

from adfsmfa.

Hello

I already tried to reopen the console, the view is still corrupt.

The value Must be "TRUE" or "FALSE" and not "true".

In AD Attribute editor i can see it in uppercases, only in Powershell it is displayed in this way.

I changed the parameter with "Disable-MFAUsers", i did not change it manually.

Refreshing the GUI takes a really long time when a user is disabled.

In which eventmanager log i should see this issues?

from adfsmfa.

Please delete your user because there's no username, the user name is the key.
If you cannot do that with PowerShell ou MMC, it's because your record is wrong.
So remove all the values in ADSIEdit for msDS-cloudExtensionAttribute attributes.

And after create a user with PS (Add-MFAUSers), with the console or registering on the fly when login in.

Remember that in ADDS Configuration, adfs service Account must hare read/write rights over all users properties.
If you don't want to write in ADDS, you can use SQL mode configuration.

If you have multiple ADFS Servers, NETBIOS over tcpip must be active on each server lan connection.
And Firewall on both servers must allow ports 137, 138, 139 between both machines

Regards

from adfsmfa.

You can watch in the default eventviewer "Applications"

from adfsmfa.

Hello

I think it is a display problem in the GUI.
When having the filter "Active users only" enabled i can see the username and email.

After removing all filters i can see entries but no data inside.

In PS i can see that both are enabled.

Thank you. Günther

from adfsmfa.

Ok,

But very strange for the MMC, never seen that before.

Regards

from adfsmfa.