In order to determine if MFA is enabled, the platform checks only IAM users that have regular passwords.