Azure AD auth menthod used by users

Question

Hello Everyone,

Im looking for a Powershell cmd or GUI methods to export a list of user by their auth method setup.
Since we allow all methods such as text, phone call, APP notification, Is there any way to tell which user is using which method ?

Thanks

Answer 1

Hi SamCook,

To get the all the user MFA registered details you need to use MSOL powershell Module.

In your PowerShell run this commands:

For All users:

Connect-MsolService

Get-MsolUser -All | Select-Object @{N='UserPrincipalName';E={$_.UserPrincipalName}},@{N='MFA Status';E={if ($_.StrongAuthenticationRequirements.State){$_.StrongAuthenticationRequirements.State} else {"Disabled"}}},@{N='MFA Methods';E={$_.StrongAuthenticationMethods.methodtype}} | Export-Csv -Path c:\MFA_Report.csv -NoTypeInformation

For Single user:

$user=Get-MsolUser -UserPrincipalName "testuser@xyz.com"
$user.StrongAuthenticationMethods

Let me know if this helps you.

Answer 2

You can do this via the Get-MsolUser cmdlet, more specifically look at the StrongAuthenticationMethods property. Or use the Graph API: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethods-overview?view=graph-rest-beta