← cd ~/licences
// licences · sku
MFA_STANDALONEMicrosoft Azure Multi-Factor Authentication
MFA_STANDALONE is the SKU part number Microsoft uses for Microsoft Azure Multi-Factor Authentication. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.
| Product name | Microsoft Azure Multi-Factor Authentication |
|---|---|
| String ID (SkuPartNumber) | MFA_STANDALONE |
| GUID (SkuId) | cb2020b1-d8f6-41c0-9acd-8ff3d6d7831b |
| Service plans | 2 |
Service plans included (2)
| Service plan | Name | ID |
|---|---|---|
EXCHANGE_S_FOUNDATION | Exchange Foundation | 113feb6c-3fe4-4440-bddc-54d774bf0318 |
MFA_PREMIUM | Microsoft Azure Multi-Factor Authentication | 8a256a2b-b617-496d-b51b-e76466e88db0 |
Is it in your tenant?
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "MFA_STANDALONE" |
Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }Assign it to a user
For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
-AddLicenses @{ SkuId = "cb2020b1-d8f6-41c0-9acd-8ff3d6d7831b" } -RemoveLicenses @()Who has it?
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq cb2020b1-d8f6-41c0-9acd-8ff3d6d7831b)" `
-ConsistencyLevel eventual -CountVariable n -All |
Select-Object DisplayName, UserPrincipalNameSimilar licences
These share the most service plans with MFA_STANDALONE.
AAD_PREMIUMMicrosoft Entra ID P1 · 50% overlapAAD_PREMIUM_FACULTYMicrosoft Entra ID P1 for faculty · 50% overlapAAD_PREMIUM_USGOV_GCCHIGHMicrosoft Entra ID P1_USGOV_GCCHIGH · 50% overlapAAD_PREMIUM_P2Microsoft Entra ID P2 · 40% overlapCDSAICAPACITYAI Builder Capacity add-on · 33% overlapSPZA_IWApp Connect IW · 33% overlapClipchamp_StandardClipchamp Standard · 33% overlapCDS_FILE_CAPACITYCommon Data Service for Apps File Capacity · 33% overlap