Create domain report of users with 2FA types enabled.

[Gabrielporto]

Dears, good morning.

I am one of the domain admins at the company I work for, and after the recent increase in sim-swap cases we decided to apply 2FA to the entire domain with the restriction of SMS or phone calls.

As Google doesn't have a subtle way to change the 2FA policy without blocking users' accounts, I'm thinking of generating a report of users who have their 2FA activated by SMS or phone call, so that I can send emails to these collaborators alerting and requesting the change by a deadline.

The big problem is that the report generation tool doesn't give me this type of option, or for me it's not so obvious. Would someone able to help me on this issue?

Thanks in advance!

[icrew]

See the Step 2: Review the data > General > 2-Step Verification enrollment section of https://support.google.com/a/answer/6000269#zippy=%2Cgeneral

Hope that helps, at least a little,

Ian

[Gabrielporto]

Thanks, however, the only information it gives me is about the users who have 2FA enabled, but not the MFA type.

[Jan-Carlos · Accepted solution]

Hello!

The chosen method can't be obtained by reports.

Strangely 2FA is way too user side on Google Workpsace.

The first method has to be a cellphone for example, which is weird.

Hope it helps, 

Regards

[Gabrielporto]

Thanks anyway, I'll try to send it to google support as a suggestion for improvement so they can work on it. I did some research and saw that it is possible to obtain this data through an API that performs the search in the code. This data specificity exists but is not available in a report. I think it would be very relevant to include it as an object to be searched.

Anyway, thanks a lot for the answers!

[icrew]

If the info is available in the API, it’s very likely you can do this with the free, open source, command-line, indispensable GAM tool (specifically the GAMADV-XTD3 variant). Check out https://github.com/jay0lee/GAM/wiki, https://github.com/taers232c/GAMADV-XTD3/wiki, and https://groups.google.com/forum/#!forum/google-apps-manager for more details.

Hope that helps,

Ian

[Gabrielporto]

Great! I will take a look on it. Thanks!

[seigel]

Did you have success in this method?  I still don't see it outright in the API documentation..