How to get list of Users MFA Enabled, Enforced and Disabled?

Vankadari Viswanath 5 Reputation points


How to get the list of users where MFA enabled, enforced and disabled, using Graph API.

I tried using the API(

In the api response, I always get isMfaRegistered = true, irrespective of MFA disabled or enabled(enabling security defaults to true or false).



Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,316 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Vasil Michev 99,936 Reputation points MVP

    If you are looking to get the old per-user MFA status (StrongAuthenticationMethods and/or StrongAuthenticationRequirements), this is not currently exposed via the Graph API. For the time being, keep using Get-MsolUser.

    0 comments No comments

  2. Deepanshu Sharma 490 Reputation points Microsoft Vendor

    Hi Vankadari Viswanath

    As a workaround, you can try the Multi-Factor Authentication Portal

    You would get the list of users in your tenant with the Multi-Factor Auth Status.

    Screenshot 2023-12-04 024124

    Do click on "Mark as Answer" on the post if that helps you, this can be beneficial to other community members.

    0 comments No comments