How to get list of Users MFA Enabled, Enforced and Disabled?

Question

Hi,

How to get the list of users where MFA enabled, enforced and disabled, using Graph API.

I tried using the API(https://graph.microsoft.com/beta/reports/authenticationMethods/userRegistrationDetails).

In the api response, I always get isMfaRegistered = true, irrespective of MFA disabled or enabled(enabling security defaults to true or false).

Regards,

Viswanath

Answer 1

If you are looking to get the old per-user MFA status (StrongAuthenticationMethods and/or StrongAuthenticationRequirements), this is not currently exposed via the Graph API. For the time being, keep using Get-MsolUser.

Answer 2

Hi Vankadari Viswanath

As a workaround, you can try the Multi-Factor Authentication Portal

You would get the list of users in your tenant with the Multi-Factor Auth Status.

---

Do click on "Mark as Answer" on the post if that helps you, this can be beneficial to other community members.