PowerShell Add-MFAUsers - Error adding user not found

neos-sdi / adfsmfa

MFA for ADFS 2022/2019/2016/2012r2

MIT License

143 stars 52 forks source link

PowerShell Add-MFAUsers - Error adding user not found #326

Closed TerrierX closed 9 months ago

TerrierX commented 9 months ago

Hi guys,

I have the following error when trying to add a new user via PowerShell: Add-MFAUsers -Identity test.test@mydomain.com -Email test.test@mydomain.com -Method Email -Confirm:$false

Error message:

Add-MFAUsers : Error adding user test.test@mydomain.com User test.test@mydomain.com not found ! At line:1 char:1 Add-MFAUsers -Identity test.test@mydomain.com -Email ... CategoryInfo : OperationStopped: (MFA.AddMFAUser:AddMFAUser) [Add-MFAUsers], Exception FullyQualifiedErrorId : 1004,MFA.AddMFAUser

Adding the user manually via the MMC works without any problems. It used to work, but unfortunately I can't say exactly when it stopped working, as we sometimes create users manually. When I first noticed the error we were on version 3.1.2305.0, then I updated today to the latest version (3.1.2312.0) but still got the same error message.

Any ideas?

Thank you!

Ps. Storage settings = Use Active Directory

redhook62 commented 9 months ago

Hi @TerrierX

The problem only arises for "ADDS" configurations. A check to see if a user is registered was invalid. Please validate this version, as I currently do not have time to retest all the features on the different operating systems.

Thank you in advance for confirming that everything is in order.

TerrierX commented 9 months ago

Thank you for the quick feedback and the bugfix. I'll test it tomorrow morning and keep you posted about the results.

TerrierX commented 9 months ago

Update worked without any issues

The following tests were performed successfully:

Manual execution of the PowerShell script to add a user (Add-MFAUsers -Identity test.test@mydomain.com -Email test.test@mydomain.com -Method Email -Confirm:$false)
Complete run of the registration with mail token executed via PowerShell
Complete run of the registration with TOTP token executed via PowerShell

Conspicuous but not a big deal for us, as it was the same before, I think:

Manually add a user via MMC Console No matter which setting I made when adding the user (for example: Method "Receive an email" and "MFA Active Authentication" checked), the method was "Choose" after adding and the check mark for enabled was removed. When I changed it again, it worked as expected.

So overall I am happy :) Thank you

redhook62 commented 9 months ago

Great!

I'm going to redo some tests for the console and then I'm going to publish the new version. Thank you again for your help.

redhook62 commented 9 months ago

Hi @TerrierX

Latest version available for download. We also fix the problems in the MMC

regards

TerrierX commented 9 months ago

@redhook62 I tested the latest Version and I can confirm that the MMC issue is fixed 👍 Thank you!

One small thing that I noticed during my tests, it seems that Google has decided to change the Logo of their Authenticator App Maybe you can put that on your list for the next update - Thank you!

p_googleauthenticator