Retrieve a password that's registered to a user, represented by a passwordAuthenticationMethod object. For security, the password itself will never be returned in the object and the password property is always null.
For delegated scenarios, the administrator needs at least one of the following Microsoft Entra roles.
Global Reader
Authentication Administrator
Privileged Authentication Administrator
Admins with User Administrator, Helpdesk Administrator, or Password Administrator roles can also retrieve password authentication methods for non-admin users and a limited set of admin roles as defined in Who can reset passwords.
HTTP request
Get details of your own password authentication method.
GET /me/authentication/passwordMethods/{id}
Get details of your own or another user's password authentication method.
GET /users/{id | userPrincipalName}/authentication/passwordMethods/{id}
Optional query parameters
This method does not support optional query parameters to customize the response.
Request headers
Name
Description
Authorization
Bearer {token}
Request body
Don't supply a request body for this method.
Response
If successful, this method returns a 200 OK response code and the requested passwordAuthenticationMethod object in the response body.
GET https://graph.microsoft.com/v1.0/me/authentication/passwordMethods/28c10230-6103-485e-b985-444c60001490
// Code snippets are only available for the latest version. Current version is 5.x
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Me.Authentication.PasswordMethods["{passwordAuthenticationMethod-id}"].GetAsync();
// THE CLI IS IN PREVIEW. NON-PRODUCTION USE ONLY
mgc users authentication password-methods get --user-id {user-id} --password-authentication-method-id {passwordAuthenticationMethod-id}
<?php
// THIS SNIPPET IS A PREVIEW VERSION OF THE SDK. NON-PRODUCTION USE ONLY
$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);
$result = $graphServiceClient->me()->authentication()->passwordMethods()->byPasswordAuthenticationMethodId('passwordAuthenticationMethod-id')->get()->wait();
Import-Module Microsoft.Graph.Identity.SignIns
# A UPN can also be used as -UserId.
Get-MgUserAuthenticationPasswordMethod -UserId $userId -PasswordAuthenticationMethodId $passwordAuthenticationMethodId
# THE PYTHON SDK IS IN PREVIEW. FOR NON-PRODUCTION USE ONLY
graph_client = GraphServiceClient(credentials, scopes)
result = await graph_client.me.authentication.password_methods.by_password_authentication_method_id('passwordAuthenticationMethod-id').get()