List all azure ad users that have mfa enabled

Question

Hi all,
I'd like to make a list of all users in azure ad and see who's got mfa enabled and who dont. How can I do so in the CLI/GUI?

Answer 1

Via the UI, easiest way is to use the User registration details report: https://portal.azure.com/#blade/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/UserRegistrationDetails/menuId/AuthMethodsActivity
If looking for a programmatic way, I'd recommend the /userRegistrationDetails endpoint: https://learn.microsoft.com/en-us/graph/api/authenticationmethodsroot-list-userregistrationdetails?view=graph-rest-beta&tabs=http

GET https://graph.microsoft.com/beta/reports/authenticationMethods/userRegistrationDetails