I'm often been asked by customers if it is possible to pre-register (even bulk) users for MFA but don't enable it directly for the whole account, because they want to use it in Conditional Access.
So I did a blog post on that recently:
(Bulk) pre-register MFA for users without enable MFA on the account
Another thing that is often been asked is, if it is possible to only force the registration for Azure MFA but also don't activate it on the account, mostly because MFA should be used in Conditional Access.
Currently you need an AAD P2 license for that and set the MFA registration policy, but I found a NEW way to do that without this license.
See my blog post about that here:
Force Azure MFA registration without enabling MFA on the user
Hope that is valuable for you. Feel free to comment or share updates, additions, corrections to what I wrote.
/Peter
