Forum Discussion
Report on MFA Status with Conditional Access
I've been using this script, it reports on users that are mfa enforced via CA policy and have a disabled mfa user state.
https://gallery.technet.microsoft.com/office/Export-Office-365-Users-81747c73
n3vers
Thanks. I already came across that script.It basically does the same as mine.
It's not accurate.
If there is a Conditional Access policy, but due to some conditions a particular account is not affacted by it and he has an Authentication Phone configured, the script (like mine) will report that MFA is enabled even though it's not enforced.
We have a couple of these accounts in our environment.
While everything is under control here, I wanted to have a reliable report where I can look at occasionally to identify such accounts if they, for some reason, slip through.
NidalT
Did you ever find an accurate way to report on MFA as have just found our current reporting have the same issue.- Unfortunately no. Once you switch to MFA via Conditional Access you can't have a 100% accurate report.
