update allow methods in MFA settings in Azure AD

soorya raj 81 Reputation points
2024-09-03T16:34:40.8166667+00:00

Hi I am looking for an API to update default and allowed method in mfa settings of azure ad

i tried

POST https://graph.microsoft.com/v1.0/users/{user-id}/authentication/methods

which failed with below error(I think it is not a valid api)

Resource not found for segment 'users('******@xx.onmicrosoft.com')/authentication/methods'.\"

I have a requirement like enable mfa with phone message but method but the number must be given by user.

below url need mandatory mobile number so i can't use that too

https://graph.microsoft.com/v1.0/users/{user-id}/authentication/phoneMethods

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
Microsoft Security | Microsoft Entra | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Vasil Michev 119.9K Reputation points MVP Volunteer Moderator
    2024-09-03T16:43:52.1266667+00:00

    Allowed methods are controlled via authentication policies: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethodspolicies-overview?view=graph-rest-1.0

    For example to configure settings for the Voice call method, you'd use:

    PATCH /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/voice
    
    
    

    Refer to the documentation above for more details.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.