Get a real report of users with MFA enabled.

%3CLINGO-SUB%20id%3D%22lingo-sub-2424456%22%20slang%3D%22en-US%22%3EGet%20a%20real%20report%20of%20users%20with%20MFA%20enabled.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2424456%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20folks%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20have%20a%20problem%2C%20we%20are%20in%20the%20process%20to%20enable%20MFA%20in%20our%20organization%20(more%20than%20250%20users)%20and%20now%20we%20are%20finishing%20this%20project%2C%20the%20problem%20now%20is%20that%20we%20don't%20have%20a%20real%20scope%20of%20the%20current%20status%20because%20in%20the%20Azure%20Portal%20(%3CA%20href%3D%22https%3A%2F%2Faccount.activedirectory.windowsazure.com%2FUserManagement%2FMultifactorVerification.aspx%3FBrandContextID%3DO365%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EAutenticaci%C3%B3n%20multifactor%20(windowsazure.com)%3C%2FA%3E)%20who%20set%20up%20this%26nbsp%3Bthrough%20MyAccount.Microsoft.com%20%26gt%3B%20Security%20Info%20%26gt%3B%20Update%20Info%20-%20the%20Azure%20portal%20continues%20to%20show%20that%20MFA%20it%20is%20not%20enabled%20yet%20if%20functions%3B%26nbsp%3Beven%20if%20is%20required%20to%20configure%20or%20access%20certain%20account%20settings%20to%20the%20useres.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20any%20other%20way%20to%20get%20the%20actual%20status%20of%20who%20has%20MFA%20enabled%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2424456%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ecompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2425171%22%20slang%3D%22en-US%22%3ERe%3A%20Get%20a%20real%20report%20of%20users%20with%20MFA%20enabled.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2425171%22%20slang%3D%22en-US%22%3EThe%20%22actual%20status%22%20will%20depend%20on%20how%20exactly%20you%20are%20requiring%20registration%2Fenforcing%20MFA%2C%20but%20in%20any%20case%20your%20best%20bet%20is%20the%20credential%20registration%20report%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Freportroot-list-credentialuserregistrationdetails%3Fview%3Dgraph-rest-beta%26amp%3Btabs%3Dhttp%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Freportroot-list-credentialuserregistrationdetails%3Fview%3Dgraph-rest-beta%26amp%3Btabs%3Dhttp%3C%2FA%3E%3C%2FLINGO-BODY%3E
Frequent Visitor

Hello folks :)

 

I have a problem, we are in the process to enable MFA in our organization (more than 250 users) and now we are finishing this project, the problem now is that we don't have a real scope of the current status because in the Azure Portal (Autenticación multifactor (windowsazure.com)) who set up this through MyAccount.Microsoft.com > Security Info > Update Info - the Azure portal continues to show that MFA it is not enabled yet if functions; even if is required to configure or access certain account settings to the useres.

 

Is there any other way to get the actual status of who has MFA enabled?

 

2 Replies
The "actual status" will depend on how exactly you are requiring registration/enforcing MFA, but in any case your best bet is the credential registration report: https://docs.microsoft.com/en-us/graph/api/reportroot-list-credentialuserregistrationdetails?view=gr...
I use this report personally. https://portal.azure.com/#blade/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/UserRegistrationDet...

it states MFA capable. To know what users have MFA enabled, you need to check your CA policies