MFA Enrollment Audit Report

    ADSelfService Plus provides MFA protection across multiple endpoints, including Windows, macOS, and Linux devices, as well as VPN, OWA, and enterprise application logins. Once users enroll in MFA through ADSelfService Plus, they can securely access all supported endpoints protected by the solution.

    The MFA Enrollment Audit Report presents detailed information on every MFA enrollment activity, helping administrators monitor enrollment trends, track administrative actions, and ensure security compliance across all authentication methods.

    • How it works
    • Generating the MFA Enrollment Audit Report
    • Customizing the MFA Enrollment Audit Report
    • Exporting the MFA Enrollment Audit Report
    • Tips

    How it works

    This report queries the ADSelfService Plus database to retrieve detailed records of all MFA enrollment attempts, including both successful and failed enrollments. Enrollment methods (self-enrollment, admin enrollment, CSV bulk enrollment) across multiple devices and authenticator types are tracked, and presented in this report for the specified date range.

    Prerequisite: You must have administrator or technician-level access to the ADSelfService Plus portal to generate and view reports.

    Generating the MFA Enrollment Audit Report

    To generate the MFA Enrollment Audit Report:

    MFA Enrollment Audit Report
    1. Log into the ADSelfService Plus admin portal with administrator or operator privileges.
    2. Navigate to Reports > MFA Reports > MFA Enrollment Audit Report.
    3. Specify the domain using the Select Domain option.
    4. Specify OUs (if necessary) using the Select OUs option.
    5. The Period drop-down menu can be used to specify the time period for which to generate the reports. Options include Today, Yesterday, Last 7 days, Last 30 days, This month, and Custom Period.
    6. Click Generate to generate the report.

    Customizing the MFA Enrollment Audit Report

    • Adding or removing columns: To add or remove columns, click on the Add/Remove Columns [ ] option at the far right of the report. In the Select the columns to be displayed pop-up that appears, select the required fields under Available Columns and click on the right arrow ( >> ) to move it to the Selected Columns. To remove columns, select the unused fields under Selected Columns and click on the left arrow ( << ) to move it to Available Columns.
    MFA enrollment audit report in ADSelfService Plus
    • Ordering the columns: The columns' positions can also be altered by selecting a value under Selected Columns and using the Up and Down options to change its position.

    Advanced Filtering

    Once the report is generated, the entries can be narrowed down based on the following parameters by clicking the Advanced Filter [ ] icon at the far-right side of the report page.

    Customizing the MFA enrollment audit report in ADSelfService Plus
    • Attempted from: This option lets you display results by the name of the machine enrollment was attempted from. The conditions available to refine this include Contains, Does Not Contain, Is, Is Not, Starts With, and Ends With.
    • IP Address: This option lets you display results by IP address. The conditions available to refine this include Contains, Does Not Contain, Is, Is Not, Starts With, and Ends With.
    • Status: Entries can be narrowed-down by whether enrollment was a Success or a Failure.
    • Attempted Action: The report entries can be narrowed-down based on the action attempted or excluding a certain action. The actions available to refine this are Admin Disenrollment, Backup Code Generation by Technician, CSV Enrollment, DB Fetcher Enrollment, Self-Disenrollment, and Self-Enrollment.
    • Authenticator Name: The report entries can be narrowed based on the authenticator enrollment was attempted for. You can generate it by specifying or excluding a particular authenticator.
    • Access Mode: The report entries can be narrowed based on the type of device enrollment was attempted from. You can generate it by specifying or excluding a particular device type.
    • Policy Name: This option lets you narrow-down the enrollment attempts by policy name. The conditions available to refine this include Contains, Does Not Contain, Is, Is Not, Starts With, and Ends With.

    Sorting

    Click on any of the column headers to view the report's entries in ascending or descending order.

    Searching

    • Click on the search icon [ ] in order to search for specific data in the report.
    • Specific users can be searched for using attributes such as their sAMAccountName, or Display Name.
    • Searching happens using the criteria ' contains '. For example, if the username column is searched for the word " jack " , then all usernames containing the sequence " jack " will be displayed as a result.

    Automating the MFA Enrollment Audit Report

    • The Schedule Reports option can be used to schedule the generation of reports at specified intervals, and automatically email them to administrators or specific email addresses. Learn to schedule reports here.

    Exporting the MFA Enrollment Audit Report

    • The Export As option at the right corner of the page helps export the report in CSV, PDF, XLS, XLSX, HTML and CSVDE formats.

    Tips

    • The More option at the right corner of the page lists the Printable View, Send Mail, and Export Settings options.
      • The Printable View option can be used to preview and print the report.
      • The Send Mail option can be used to mail the report to the desired email addresses.
      • Additionally, you can configure custom Export Settings, such as a personalized title for the report and a header logo that you may wish to display on each page.