How to get list of Users MFA Enabled, Enforced and Disabled?

Vankadari Viswanath 5 Reputation points
2023-11-29T14:55:02.5766667+00:00

Hi,

How to get the list of users where MFA enabled, enforced and disabled, using Graph API.

I tried using the API(https://graph.microsoft.com/beta/reports/authenticationMethods/userRegistrationDetails).

In the api response, I always get isMfaRegistered = true, irrespective of MFA disabled or enabled(enabling security defaults to true or false).

Regards,

Viswanath

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,316 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Vasil Michev 99,936 Reputation points MVP
    2023-11-29T16:09:46.7333333+00:00

    If you are looking to get the old per-user MFA status (StrongAuthenticationMethods and/or StrongAuthenticationRequirements), this is not currently exposed via the Graph API. For the time being, keep using Get-MsolUser.

    0 comments No comments

  2. Deepanshu Sharma 490 Reputation points Microsoft Vendor
    2023-12-03T21:12:49.11+00:00

    Hi Vankadari Viswanath

    As a workaround, you can try the Multi-Factor Authentication Portal

    You would get the list of users in your tenant with the Multi-Factor Auth Status.

    Screenshot 2023-12-04 024124


    Do click on "Mark as Answer" on the post if that helps you, this can be beneficial to other community members.

    0 comments No comments