Absolutely! Security Manager has workflows to identify how MFA is being enforced across multiple tenants via all methods (per-user, conditional access policy, and security default) and walks a user through Security Manager commands to create/enforce MFA where it is needed (depending on the results of the initial report).