Reset MFA for an Entra user

Skill: entra-mfa-reset · Risk: high · Steps: 7

Resets all MFA registration methods for a Microsoft Entra ID user so they are prompted to re-enroll on next sign-in.

What it does, step by step

Step 1. Checks that the user’s Entra account exists and reports whether it is enabled. read-only · c_entra_get_user_info

Step 2. Reports the user’s current MFA registration state and method count before making changes. read-only · c_entra_get_mfa_status

Step 3. Reviews recent sign-in logs to confirm the issue matches an MFA problem. read-only · c_entra_get_sign_in_logs

Step 4. Asks the administrator to confirm before removing all of the user’s MFA methods. asks the user · wait_for_user_ack

Step 5. Clears all registered MFA methods for the user in Entra. makes a change, asks permission, preview first · c_entra_reset_mfa

Step 6. Confirms the user’s MFA methods were successfully cleared. read-only · c_entra_get_mfa_status

Step 7. Tells the user their MFA was reset and they must re-enroll at next sign-in. no tools

Tools it may use

wait_for_user_ack, c_entra_get_user_info, c_entra_get_mfa_status, c_entra_get_sign_in_logs, c_entra_reset_mfa