Query: Ensure that a multifactor authentication policy exists for all users

Description

A Conditional Access policy can be enabled to ensure that users are required to use Multifactor Authentication (MFA) to login.

Query

Tables used in this query:

• azure_tenant
• azuread_conditional_access_policy
• azuread_directory_role

Controls using this query:

• 5.2.4 Ensure that a multifactor authentication policy exists for all users
• Ensure that a multifactor authentication policy exists for all users

SQL