MFA Status Report

Multi-Factor Authentication enrollment and usage status across all users. Identify users without MFA, track adoption rates, and monitor authentication method distribution.

Overview

The MFA Status Report provides comprehensive visibility into Multi-Factor Authentication adoption across your managed tenants. Identify users who have not enrolled in MFA, track which authentication methods are being used, and monitor MFA enforcement compliance.

Report Columns

Column	Description
User	Display name and user principal name
MFA Status	Enabled, Enforced, Disabled, or Per-User
Registration Status	Registered or Not Registered
Default Method	Primary MFA method configured
Methods Registered	All MFA methods the user has registered
Last MFA Date	Date of the most recent MFA challenge
Admin Account	Whether the user holds an admin role
Conditional Access	Whether MFA is required via CA policy

MFA Status Categories

Enforced — MFA is required for every sign-in
Enabled — MFA is available but not yet enforced for all sign-ins
Conditional — MFA is required based on Conditional Access policies
Disabled — MFA is not configured or required
Not Registered — User has not completed MFA registration

Warning: Users without MFA enabled are significantly more vulnerable to account compromise. Admin accounts without MFA represent a critical security risk.

Authentication Methods

Method	Description
Microsoft Authenticator	Push notifications or TOTP codes
SMS	Text message verification codes
Phone Call	Voice call verification
FIDO2 Security Key	Hardware security key
Windows Hello	Biometric or PIN authentication
Email	Email verification (less secure)

Adoption Metrics

Overall MFA adoption rate — Percentage of users with MFA
Admin MFA rate — Percentage of admin accounts with MFA
Registration completion — Users registered vs. total users
Method distribution — Which MFA methods are most popular

Filters

MFA Status — Enabled, Enforced, Disabled, Not Registered
Admin Accounts — All users, Admins only, Non-admins only
Method — Filter by specific authentication method
Tenant — Filter by managed tenant

Graph API Data Sources

GET /reports/authenticationMethods/userRegistrationDetails
GET /reports/credentialUserRegistrationDetails

API Reference

GET /api/reports/security/mfa-status — Get MFA status report
GET /api/reports/security/mfa-status/summary — Get adoption summary
POST /api/reports/security/mfa-status/export — Export report data