Azure AD B2C Create/Update/Delete 2FA Phone Authentication contact info with Microsoft Graph API

Question

Hi,

I am currently trying to update or delete a Azure AD B2C users Phone Authentication field (see example below) with the Microsoft Graph API.

I am using the following methods in C# from the Graph API SDK to update and delete the authentication phone number respectively.

When I call these methods the phone number does not change. All my other MS Graph API methods work perfectly and I have a method to Update and Delete thee "SoftwareOathMethods" (Authenticator App) that is working fine. Is there something I am missing or is what I am trying to achieve not possible?

Kind Regards,
Will

Answer 1

Hi @Will Godwin ,

Thanks for reaching out.

I understand you are trying to update and delete phone authentication method for B2C users or consumers and unable to do so.

Unfortunatey, Phone authentication method is not supported for B2C users or consumers signed up by different identity providers using Graph API as of now.

Only for those users which are created within the organization in B2C can be updated phone authentication method using Graph API.

I would suggest you post this idea at the Azure Feedback Portal, which is monitored by the product team for feature enhancements.
Thank you for your time and patience throughout this issue.

Hope this will help.

Thanks,
Shweta

---------------------------

Please remember to "Accept Answer" if answer helped you.

Answer 2

Hello @Will Godwin

Thanks for reaching out!

You need to add phone authentication for your users before you can update phone numbers.

Adding phone authentication first: For adding phone authentication for other users, we can use Postman with UserAuthenticationMethod.ReadWrite.All application permissions granted to your app. Please note that if your user already has a phone number you cannot add it again.

Below are the sample endpoint details-

POST /users/{id | userPrincipalName}/authentication/phoneMethods  
  
{  
  "phoneNumber": "+1 2065555555",  
  "phoneType": "mobile"  
}  

Updating Phone Auth:

Sample endpoint details: Refer this documentation for PhoneAuthID

PATCH https://graph.microsoft.com/v1.0/users/{user-id}/authentication/phoneMethods/3179e48a-750b-4051-897c-87b9720928f7  
  
{  
  "phoneNumber": "+1 2065555554",  
  "phoneType": "mobile",  
}  

Deleting Phone Auth:

Endpoint Details:

DELETE https://graph.microsoft.com/v1.0/users/{user-id}/authentication/phoneMethods/3179e48a-750b-4051-897c-87b9720928f7  

----------

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote. If you have any further questions about this answer, please click Comment.