List of users on MFA that have more than one device under their name

Copper Contributor

My first time posting anything on any forum tbh.

Is it possible to generate a report to see the list of users on MFA that have more than one device under their name? 

I have scoured the internet but most of them are related to whether users have enabled their MFA or not, status of MFA etc. 

Any suggestions, hints or even possibility would be helpful. 

Thanks :) 

3 Replies
Sure, take a look at the authentication methods Graph API endpoints: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethods-overview?view=graph-rest...
For each method, you can query the list of configured devices, where it makes sense. I.e. /authentication/phoneMethods will return the list of phone numbers registered, authentication/microsoftAuthenticatorMethods the list of devices on which Authenticator is configured, etc. Or you can do a /authentication/methods query to get them all.
Thanks for the quick update Vasil. I should have been more specific in relation to how I want the report generated.
Is there anyway to get this done using Powershell Scripts?
The Microsoft Graph SDK for PowerShell is practically a wrapper for Graph queries, so you can use the same method with it. For example, Get-MgUserAuthenticationMethod.