how can i get a list of users with MFA enabled via Conditional policy?

Question

I am unable to see a list of users with MFA enabled if they are part of a conditional policy.

Answer 1

Hi Filsoof, Alan (TAI) , the best way to do this is with a PowerShell script. The following links detail how you can accomplish this:

• https://lazyadmin.nl/powershell/list-office365-mfa-status-powershell/
• https://stackoverflow.com/questions/51267362/gathering-mfa-status-of-users-on-azure

For example:

 
 Get-MsolUser -all | select DisplayName,UserPrincipalName,@{N="MFA Status"; E={ 
    if( $_.StrongAuthenticationRequirements.State -ne $null) {$_.StrongAuthenticationRequirements.State} else { "Disabled"}}}

Please let me know if you have any questions.

If this answer helped you please mark it as "Verified" so other users can reference it.

Thank you,

James

Answer 2

Hi @Filsoof, Alan (TAI)

I think it's not possible through Powershell to get the list of user with MFA enabled only by conditional policy . Powershell can shows the status of MFA in your user account without this details.

Please don't forget to mark helpful answer as accepted