The most commonly targeted application for these attacks is Office 365, a cloud business productivity service developed by Microsoft. They continuously monitor and rapidly respond to these attacks to protect customer tenants and the Okta service. Okta’s security team sees countless intrusion attempts across its customer base, including phishing, password spraying, KnockKnock, and brute-force attacks. Most of these applications are accessible from the Internet and regularly targeted by adversaries. It is easier to use PowerShell to manage users’ MFA in Microsoft 365 and build reports.As the leading independent provider of enterprise identity, Okta integrates with more than 5500+ applications out-of-the-box. Also, you cannot export the contents of the page to a TXT/CSV file. The report doesn’t show if a user completed the MFA setup and which second factor he has selected.

You can enable, disable, reset, or configure MFA for each user using buttons in the Quick Steps panel on the right.

Enforced – a user will be forced to register a second MFA factor at the next logon.

Enabled – MFA is enabled, but a user is still using standard authentication until they select the MFA method themselves.

Disabled – multi-factor authentication is disabled (by default, for all new users).

You will see a list of all users in your tenant and the MFA status for each of them.

Portal Azure -> Azure AD-> Users -> Per-user MFA.

Microsoft 365 Admin Center -> Active Users -> Multi-factor authentication.

You can access a web page with the MFA status for all users in two ways: We suppose that you manage MFA on a per-user basis and not with the Azure Conditional Access policies.

Office 365 enable mfa