Query: identity_user_console_access_mfa_enabled

select
  id as resource,
  case
    when can_use_console_password and is_mfa_activated then 'ok'
    else 'alarm'
  end as status,
  case
    when not can_use_console_password then name || ' password login disabled.'
    when is_mfa_activated then name || ' password login enabled and MFA device configured.'
    else name || ' password login enabled but no MFA device configured.'
  end as reason
  
  , tenant_name as tenant
from
  oci_identity_user;