View which users have used MFA

Written by John Gruber Published on Last Updated on

Your organization has a Microsoft 365 tenant. It's currently configured so that only certain users are required to use multi-factor authentication (MFA) to access Microsoft SharePoint Online.

You need to determine which users have authenticated to SharePoint Online using MFA.

What action should you take to view this information?

Go to the Enterprise applications blade of the Azure AD admin center and view the sign-in logs.

Go to the Microsoft Defender admin center and perform an audit log search.

Go to the Azure Log Analytics and query the logs.

Go to the Security & Compliance admin center and download a report.

Click to show answer

You can view the sign-in logs from Azure Active Directory admin center > Enterprise applications > Sign-in logs.

https://www.gitbit.org/course/ms-500/learn/Auditing-sign-ins-and-other-actions-in-Microsoft-365-sH_Ee1DW1

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins

< Previous Next > Skip Exam >>