Multi-Factor Authentication Directory Synchronization requires approval before disabling users and removing users which exceed ...

Multi-Factor Authentication Directory Synchronization requires approval before disabling <$disable_count$> users and removing <$remove_count$> users which exceed the approval threshold of <$disable_remove_threshold$>.

Check the MultiFactorAuthAdSyncSvc.log file for a list of affected users.

Each time the Multi-Factor Authentication Server user interface is launched, it will prompt for approval.  If the disables and removes are valid, click the Yes button when prompted.  The MultiFactorAuthAdSync service will process the disables and removes during the next synchronization cycle.

If the disables and removes are believed to be in error, please check the directory service to verify.  Correcting issues in the directory service so that the threshold is no longer exceeded will automatically clear the approval requirement.