Get authenticationStrengthPolicy
Namespace: microsoft.graph
Important
APIs under the /beta
version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Read the properties and relationships of an authenticationStrengthPolicy object.
Permissions
One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.
Permission type | Permissions (from least to most privileged) |
---|---|
Delegated (work or school account) | Policy.Read.All, Policy.ReadWrite.ConditionalAccess, Policy.ReadWrite.AuthenticationMethod |
Delegated (personal Microsoft account) | Not supported. |
Application | Policy.Read.All, Policy.ReadWrite.ConditionalAccess, Policy.ReadWrite.AuthenticationMethod |
For delegated scenarios, the calling user must also be assigned one of the following Azure AD roles:
- Conditional Access administrator
- Security Administrator
- Security Reader
HTTP request
GET /policies/authenticationStrengthPolicies/{authenticationStrengthPolicyId}
Optional query parameters
This method does not support OData query parameters.
Request headers
Name | Description |
---|---|
Authorization | Bearer {token}. Required. |
Request body
Do not supply a request body for this method.
Response
If successful, this method returns a 200 OK
response code and an authenticationStrengthPolicy object in the response body.
Examples
Request
The following is an example of a request.
GET https://graph.microsoft.com/beta/policies/authenticationStrengthPolicies/00000000-0000-0000-0000-000000000004
Response
The following is an example of the response
Note: The response object shown here might be shortened for readability.
HTTP/1.1 200 OK
Content-Type: application/json
{
"@odata.type" : "#microsoft.graph.authenticationStrengthPolicy",
"id": "00000000-0000-0000-0000-000000000004",
"createdDateTime": "2017-10-30T10:59:01Z",
"modifiedDateTime": "2017-10-30T10:59:01Z",
"displayName": "Phishing resistant MFA",
"description": "Phishing resistant, Passwordless methods for the strongest authentication, such as a FIDO2 security key",
"policyType": "builtIn",
"requirementsSatisfied": "mfa",
"allowedCombinations": [
"windowsHelloForBusiness",
"fido2",
"x509CertificateMultiFactor"
],
"combinationConfigurations": []
}
Feedback
Submit and view feedback for