Find MFA Capable Users with Microsoft Graph PowerShell

Learn how to identify users who are capable of multi-factor authentication (MFA) in Microsoft Entra ID using Microsoft Graph PowerShell.

# Validated on Microsoft.Graph PowerShell SDK v2.29.1
$ErrorActionPreference = 'stop'
$requiredScopes = 'AuditLog.Read.All'  

$ctx = Get-MgContext
if (-not $ctx -or ($requiredScopes | Where-Object { $ctx.Scopes -notcontains $_ })) {
    Connect-MgGraph -Scopes $requiredScopes -NoWelcome
}

$params = @{
    'All'      = $true
    'Filter'   = 'isMfaCapable eq true'
    'PageSize' = '999'
}

$users = Get-MgReportAuthenticationMethodUserRegistrationDetail @params