Audit MFA for M365 users. Finding users with Microsoft Authenticator - Outlook Mobile.

Mountain Pond 1,576 Reputation points
2025-02-20T22:42:56.9866667+00:00

Hello,

I use "Get-MgUserAuthenticationMethod" to get all configured methods for each user.

However, as it turned out, this method shows "Microsoft Authenticator - Outlook Mobile" as "Microsoft Authenticator".

Unfortunately, I did not find other methods that would give more detailed information. However, I need to somehow identify users who have "Microsoft Authenticator - Outlook Mobile".

Perhaps you can suggest some other approach.

I have added a screenshot displaying information about authentication methods.

Thank you.

vmconnect_b9YMcItxOv

msedge_ktDr4QdQcv

Microsoft Security | Microsoft Graph
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 119.6K Reputation points MVP Volunteer Moderator
    2025-02-21T07:37:10.2766667+00:00

    You need to use the /beta endpoint and take a look at the clientAppName property, it will return a value of outlookMobile for any users that have Authenticator Lite/via Outlook.. Refer to the documentation for more details: https://learn.microsoft.com/en-us/graph/api/resources/microsoftauthenticatorauthenticationmethod?view=graph-rest-beta

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.