Blog

Introducing in-browser app banners: Set guardrails for cloud apps | Learn more →

Ready to help

What Azure AD license is required to query Microsoft 365 MFA details?

If you add a Microsoft 365 API integration that does not have the required license for Push to query MFA adoption details, you will get an integration error and may be prompted to reintegrate.

Microsoft's MFA report comes from the "Advanced security and usage reports” feature that's included with an Azure Active Directory Premium P1 license. Push's integration also relies on data provided by Microsoft's audit log to provide details on when an employee last logged in to their M365 account, and when a third-party integration was last used. These features also require a P1 license.

Only those consuming the report need a license — that might only be you. This license can be purchased standalone, or is included in Microsoft 365 Business Premium or Microsoft 365 E3 or higher.

If you are unsure, or you feel like you are seeing this message in error, please contact us.