Automated multi-factor authentication enforcement during administrative account lifecycle events

A Multi-Factor Authentication (“MFA”) enforcement method for an enterprise, comprising:

• scanning, by a computer processor of an MFA tool associated with a back-end computer server and in communication with an Identity and Access Management (“IAM”) tool, a computing environment, associated with Lightweight Directory Access Protocol (“LDAP”), along with an employee and account data store to automatically detect administrative account lifecycle events for the enterprise, wherein the employee and account data store contains electronic records associated with a plurality of employees and cloud computing accounts for the enterprise;
• responsive to the identified administrative account lifecycle events, automatically determining modifications to MFA requirements;
• and
• responsive to the determination, automatically implementing second factor mappings, associated with hardware tokens, to enforce the MFA requirements, wherein the automatic implementation of second factor mappings to enforce the MFA requirements includes determining that an identified account qualifies for MFA but is not currently enabled and, as a result:
• selecting hardware token serial numbers, client keys, and secrets from a repository by the IAM tool,
• registering, by the IAM tool, the serial numbers, client keys, and secrets with the MFA tool, and
• arranging to physically provide the hardware token to the employee.

A non-transitory computer-readable medium storing instructions, that, when executed by a processor, cause the processor to perform a multi-factor authentication (MFA) enforcement method for an enterprise, the method comprising:

• scanning, by a computer processor of an MFA tool associated with a back-end computer server and in communication with an Identity and Access Management (“IAM”) tool, a computing environment, associated with Lightweight Directory Access Protocol (“LDAP”), along with an employee and account data store to automatically detect administrative account lifecycle events for the enterprise, wherein the employee and account data store that contains electronic records associated with a plurality of employees and cloud computing accounts for the enterprise;
• responsive to the identified administrative account lifecycle events, automatically determining modifications to MFA requirements;
• and
• responsive to the determination, automatically implementing second factor mappings, associated with hardware tokens, to enforce the MFA requirements, wherein the automatic implementation of second factor mappings to enforce the MFA requirements includes determining that an identified account qualifies for MFA but is not currently enabled and, as a result:
• selecting hardware token serial numbers, client keys, and secrets from a repository by the IAM tool,
• registering, by the IAM tool, the serial numbers, client keys, and secrets with the MFA tool, and
• arranging to physically provide the hardware token to the employee.