Voltar
-
Título
Fields under "Authentication contact info" are not restored -
Descrição
When restoring user objects the 'Phone', 'Alternate phone', 'Email' and 'Alternate Email' fields under 'Authentication contact info' section of the user profile are not restored and errors similar to the following are logged in the Events:
"The backup does not contain MSOnline data. The mfastate attribute will not be restored"
"Cannot restore attributes: The backup does not contain MSOnline data. The mfastate attribute will not be restored"
-
Causa
The "Backup MFA settings" option has not been enabled or is not configured properly. Multi-Factor Authentication settings are not backed up by default as it is required to configure the Tenant Admin Credentials to backup these settings. -
Resolução
To configure On Demand Recovery to backup the MFA settings:- Login to On Demand Recovery
- From the Dashboard click Manage Backups
- Click Edit or your tenant name
- Check 'Backup MFA settings, conditional access policies and data related to inactive mailboxes'
- Enter the credentials of an account that has either the Exchange Administrator or User Administrator role
- Click Test Connection to confirm the configuration is correct
- Click Save
- Click Finish
NOTE: The account you specify either has to have MFA disabled or you have to add the On Demand Recovery IP Address to the list of Trusted IPs for your Azure tenant. Please contact Support to obtain the IP Address if needed.The following Microsoft article discusses how to configure the bypass for MFA using Trusted IPs:https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#trusted-ips