Query: Ensure that 'multifactor authentication' is 'enabled' for all users

Description

Multifactor authentication requires an individual to present a minimum of two separate forms of authentication before access is granted. Multifactor authentication provides additional assurance that the individual attempting to gain access is who they claim to be. With multifactor authentication, an attacker would need to compromise at least two different authentication mechanisms, increasing the difficulty of compromise and thus reducing the risk.

Query

Tables used in this query:

• azure_tenant
• azuread_user_registration_details_report

Controls using this query:

• 5.1.2 Ensure that 'multifactor authentication' is 'enabled' for all users
• Ensure that 'multifactor authentication' is 'enabled' for all users

SQL