VALID BUT MFA (79)

[yosignals]

In a lot of organisations IT Bulk reset accounts, and what's observed is that you have a valid login, but you need to update a password, or more so in the cloud it hasnt done it's MFA onboarding yet, because that account is unmanaged and still has the Password1 from the last bulk reset, so you login but you get the 'we need some more information' page, this shows as VALID BUT MFA (79)

I think there's good wiggleroom here to separate the nuance of credentials working but protected by MFA and credentials working but needs to onboard / configure MFA

Loving your work, this tool is awesome.
Thank you.