Create new View for MFA status Disabled
We can currently only filter the list of users in the Multi-Factor Authentication portal by all, enabled, or enforced.
As we go thru MFA deployment, at a minimum I need to be able to focus on the users that are still disabled for MFA so they can be enabled. We like a view for "Disabled" MFA status.
I would also like to enable MFA based on other attributes (such as department or group membership) rather than picking one user at a time out of 1300 users.
Embry Fedora commented
Recently i came across below PowerShell script to get a list of MFA disabled users along with most required attributes like Display Name, User Principal Name, Department, MFA Status, License Status, Is Admin, SignIn Status.
This script also provides MFA status based output. You get a list of only MFA enabled/Enforced users using filters. MFA enabled users report provides Display Name, User Principal Name, MFA Status, Activation Status, Default MFA Method, All MFA Methods, MFA Phone, MFA Email, License Status, IsAdmin, SignIn Status.
Thankfully I found this...can't believe this isn't an option and I need this as well!
Konstantinos Chionas commented
I agree, its a must to have disabled filter.
how has this not been implemented yet?
I agree there's a need for this in the web console to easily determine non-compliance.
If you aren't aware, there's a way to view everyone's status programmatically in PowerShell.
I modified this script to include some more fields which make it easier for me to sort accounts. Then at the end, instead of using $Data, I use "$Data | out-gridview" so I can select-all and copy straight in to Excel. Then I can sort and filter to my heart's content.
Rob Clarke commented
I agree with this, it is a much needed feature.
There is no option to show all users, therefore have to go navigate through each page individually, which only show 20 users per page. Please add a 'Disabled' filter. Looking for users with this status is the most frequent reason I access this page.
I agree with this request. It would also be nice to add a column for license type. We use 2 different types of license in our tenant, one which includes MFA and one that doesn't. As it works right now, they are all just lumped in together.
Definitely need to be able to see the Disabled status. it is a pain to manually go through this list to find those that are not compliant