Skip to content

m365 Provider: Duplicate findings for check ID entra_users_mfa_capable #10054

@NetaHa

Description

@NetaHa

Issue search

  • I have searched the existing issues and this bug has not been reported yet

Which component is affected?

Prowler CLI/SDK

Cloud Provider (if applicable)

Microsoft 365

Steps to Reproduce

Hi,
I’m using Prowler v5.8.0 with the M365 provider and I’m seeing duplicate findings for the check ID entra_users_mfa_capable as in the JSON-OCSF/CSV output they have the same finding_info.uid .
I think this is a bug if you could you please look into it,
thank you in advance.

Expected behavior

each finding_info.uid is unique and every unique finding for each check ID is reported only once.

Actual Result with Screenshots or Logs

I ran this command: prowler m365 --sp-env-auth --init-modules -o prowler_reports/ --log-level DEBUG
In the OCSF JSON file output I got duplicate finding_info.uid for check:
CheckID: "entra_users_mfa_capable"
"uid": "prowler-m365-entra_users_mfa_capable-58b3beb7-b30a-4282-9a4a-ccf8fa980f3c-global-Users"

How did you install Prowler?

From pip package (pip install prowler)

Environment Resource

CLI

OS used

MacOS

Prowler version

5.8.0

Python version

3.12

Pip version

25.0.1

Context

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions