Microsoft doesn't provide a PowerShell cmdlet to return an accurate MFA status for Entra ID user accounts, but by combining data from multiple sources we can write a script to generate a report showing details of user password settings and MFA status.
Lots of people look to the Microsoft Graph PowerShell SDK and try to find a cmdlet that tells them if an account is MFA enabled or not. I quite liked the idea of using the logs to find if someone is actually using MFA, because I think that information is more valuable... At least, that was the idea.
