Migrating users to MFA and quickest way to get notified when they have completed setting it up

Question

hello there

we are hoping someone can help. We have started down the path of getting our users to configure and start using MFA.

Our question is, is there a way we can run a report or even better get notified when a user has completed the process to save us having to go to the MS 365 admin center, find the user and check to see if his status is still Enabled or if it had changed to enforced?

many thanks

Answer 1

Me_RIT, you can run to run this PS CMDLETs to figure pull out a report on the users already encrolled for MFA.

Connect-MsolService
Get-MsolUser -All | select DisplayName,BlockCredential,UserPrincipalName,@{N="MFA Status"; E={ if( $_.StrongAuthenticationRequirements.State -ne $null){ $_.StrongAuthenticationRequirements.State} else { "Disabled"}}}

Rest, you can create a script and based on this report, you can generate an email notification to get the admin team notified.

Hope this helps.

 

---------------------------------------------------------------------------------------------------------------------------------------

Please take a moment to "Mark as Answer" and/or "Vote as Helpful" wherever applicable. Thanks!

Answer 2

I'd recommend using the User registration details report as detailed here: https://docs.microsoft.com/en-us/graph/api/resources/credentialuserregistrationdetails?view=graph-rest-beta

Answer 3

Hi

I am checking in to see if the above answer was helpful. If yes, do click on the n 'Mark as answer' link in the above reply. This will help other community members facing similar query to refer to this solution. Let me know if you have any other questions.

---

Please take a moment to "Mark as Answer" and/or "Vote as Helpful" wherever applicable. Thanks!