Per user MFA to Entra Migration check list

Question

Microsoft have recently announced that, "The ability to manage authentication methods in MFA and SSPR policies ends 30 September 2024" and so everyone must, "Migrate to the Authentication methods policy in Azure Active Directory by 30 September 2024."
I have created two conditional access polices in regards with this and our current Authentication methods are in the pictures.

What do I need to cross check and update to completely migrate and close Per user MFA.
I have read the resources from Microsoft learn and other blogs but not quite sure, how my employees are getting their MFA from, is it conditional access or per user MFA.

Is there some probable way, that I can cross check what is prompting the MFA for all employees? How can I be sure that my users are getting MFA from Microsoft Entra ID only ?

Thanks all out there for answering as many questions as possible.

Thank you.

Answer 1

Just to be clear, per-user MFA is not going away, you can still use it if that's your preferred solution. As for checking CA policies coverage with regards to MFA, you can use these workbooks:

https://learn.microsoft.com/en-us/entra/identity/monitoring-health/workbook-conditional-access-gap-analyzer

https://learn.microsoft.com/en-us/entra/identity/monitoring-health/workbook-mfa-gaps

If you don't have Log analytics, work with the User registration report instead: https://portal.azure.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/UserRegistrationDetails