Tracking changes to authentication methods in Cayosoft Guardian

After a recent Microsoft update, some users may notice that Cayosoft Guardian no longer shows changes to Authentication Methods in Entra ID.

Symptoms

• Changes to user authentication methods are not reported in Change History and Event log.

• Job results about Authentication Method changes may appear incomplete or missing.

• No information on who made the change is shown.

This issue affects both the Event Logs collection job and the Entra Change collection job for Entra ID.

Temporary workaround

To detect changes to Authentication Methods until a permanent fix is available:

1. In the Cayosoft Guardian, navigate to Jobs.

2. Locate the Collect Supplementary Changes for Users job. This job can report authentication method changes by leveraging virtual attribute mapping.

   

3. Disable the Use audit log change tracking checkbox – this turns off data collection from Guardian event log.

   

4. Save the job configuration.

5. Run the job to collect changes.

Limitations of the workaround:

• The job will return detected changes to Authentication Methods.

• This process will be slow and may take a while to finish, especially in large environments.

• The name of the person (initiator) who made the change will not be shown.

Important notes

• This workaround is the only way to get updates about Authentication Method changes at this time.

• Cayosoft is actively searching for better solutions, but is not responsible for changes made by Microsoft or Entra ID.

• Updates will be posted when available.