MFA Registration Audit

4 Nodes Trigger: Weekly Audit

Workflow Diagramm

Auto-generiert

graph LR
    N0(["⚡ Weekly Audit"])
    N1["🔧 Get Registration Report"]
    N2["🔧 Filter Non-MFA"]
    N3["🔧 Alert Security"]
    N0 --> N1
    N1 --> N2
    N2 --> N3

    classDef trigger fill:#f59e0b,stroke:#b45309,color:#000
    classDef action fill:#292524,stroke:#44403c,color:#e7e5e4
    classDef logic fill:#1e1b4b,stroke:#4338ca,color:#c7d2fe
    class N0 trigger
    class N1 action
    class N2 action
    class N3 action

Nodes im Workflow

Weekly Audit

Schedule

Get Registration Report

Http Request

Filter Non-MFA

Function

Alert Security

Microsoft Teams

Workflow Beschreibung

n8n Workflow

Importiere diesen JSON-Code direkt in deine n8n Instanz.

**Name im Flow**: 13_MFA_Registration_Audit

{
    "name": "13_MFA_Registration_Audit",
    "nodes": [
        {
            "parameters": {
                "rule": {
                    "interval": [
                        {
                            "field": "weeks",
                            "triggerAtDay": 1
                        }
                    ]
                }
            },
            "name": "Weekly Audit",
            "type": "n8n-nodes-base.schedule",
            "typeVersion": 1,
            "position": [
                250,
                300
            ]
        },
        {
            "parameters": {
                "authentication": "predefinedCredentialType",
                "nodeCredentialType": "microsoftGraphOAuth2Api",
                "requestMethod": "GET",
                "url": "https://graph.microsoft.com/beta/reports/credentialUserRegistrationDetails",
                "options": {}
            },
            "name": "Get Registration Report",
            "type": "n8n-nodes-base.httpRequest",
            "typeVersion": 3,
            "position": [
                450,
                300
            ],
            "credentials": {
                "microsoftGraphOAuth2Api": {
                    "id": "YOUR_CREDENTIAL_ID",
                    "name": "Microsoft Graph Account"
                }
            }
        },
        {
            "parameters": {
                "functionCode": "const users = items[0].json.value;nconst nonMfa = users.filter(u => !u.isMfaRegistered);nreturn [{ json: { count: nonMfa.length, users: nonMfa.map(u => u.userPrincipalName) } }];"
            },
            "name": "Filter Non-MFA",
            "type": "n8n-nodes-base.function",
            "typeVersion": 1,
            "position": [
                650,
                300
            ]
        },
        {
            "parameters": {
                "resource": "chat",
                "message": "=⚠️ **MFA Audit Report**n{{ $json.count }} users have NOT registered for MFA yet.nnUsers: {{ $json.users.join(', ') }}"
            },
            "name": "Alert Security",
            "type": "n8n-nodes-base.microsoftTeams",
            "typeVersion": 1,
            "position": [
                850,
                300
            ]
        }
    ],
    "connections": {
        "Weekly Audit": {
            "main": [
                [
                    {
                        "node": "Get Registration Report",
                        "type": "main",
                        "index": 0
                    }
                ]
            ]
        },
        "Get Registration Report": {
            "main": [
                [
                    {
                        "node": "Filter Non-MFA",
                        "type": "main",
                        "index": 0
                    }
                ]
            ]
        },
        "Filter Non-MFA": {
            "main": [
                [
                    {
                        "node": "Alert Security",
                        "type": "main",
                        "index": 0
                    }
                ]
            ]
        }
    }
}

So importierst du diesen Workflow

Klappe den JSON Code oben auf und klicke Kopieren.
Öffne dein n8n Dashboard.
Drücke Strg+V direkt im Editor.

Dateiname 13_MFA_Registration_Audit.json

Auf GitHub ansehen