Is there any way to query for users that have 2FA enabled in the dashboard

[david.billings]

Is there a query I can run on the user search which will show me users with 2FA enabled?

[joshua]

@david-billings

The MFA attributes were added recently to the elasticsearch index on a user. This should be available using an ES query in version 1.30.1 and greater.

https://fusionauth.io/docs/v1/tech/release-notes/
https://github.com/FusionAuth/fusionauth-issues/issues/1352
https://fusionauth.io/docs/v1/tech/apis/users/#elasticsearch-search-engine

the user will have a variation of these attributes

  "twoFactor" : {
    "methods" : [ {
      "authenticator" : {
        "algorithm" : "HmacSHA1",
        "codeLength" : 6,
        "timeStep" : 30
      },
      "id" : "HWV2",
      "method" : "authenticator"
    } ]
  },

Thanks,
Josh

[joshua]

To add a further note,

You can search these attributes in the following manner

twoFactor.methods.method:authenticator or twoFactor.methods.method:*

in the Admin UI under users or using the Search API.

Thanks,
Josh

[joshua]

@david-billings,

As a final note, you may want to upgrade to version 1.30.2 (just released) as we made some slight improvements as to the timing of when this MFA information is available in the ES index.

Thanks,
Josh

[david.billings]

Perfect Joshua.

This gives me what I need!

Thank you!