Comments on: Get MFA Methods using MSGraph API and PowerShell SDK https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/ Documenting My Life as a System Administrator Mon, 15 Sep 2025 15:38:56 +0000 hourly 1 https://wordpress.org/?v=6.8.2 By: Jeffrey https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-49757 Mon, 15 Sep 2025 15:38:56 +0000 https://thesysadminchannel.com/?p=3806#comment-49757 If you are using External Authentication methods (in preview) then you need to modify this script adding:

‘#microsoft.graph.externalAuthenticationMethod’ {
$MethodAuthType = ‘ExternalAuthentication’
$AdditionalProperties = $Device.AdditionalProperties[“displayName”]
}

and using Get-MgBetaUserAuthenticationMethod in place of Get-MgUserAuthenticationMethod

]]> By: Jordan https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-18808 Wed, 04 Oct 2023 17:03:57 +0000 https://thesysadminchannel.com/?p=3806#comment-18808 Hello smart people, I’m trying to provide a report of users which have SMS and/or call to phone registered as an auth method for MFA. But crucially be able to distinguish between the two.

Using the native reports in the portal you only get returned “mobile phone” and does not distinguish if this is SMS or call to phone.

Looking into graph this query again only returns “mobilephone” https://graph.microsoft.com/beta/reports/authenticationMethods/userRegistrationDetails/{ID}

This query which is being deprecated does list in the sample response on the page “mobileSMS” however when I use the query I get back “mobilephone”https://learn.microsoft.com/en-us/graph/api/reportroot-list-credentialuserregistrationdetails?view=graph-rest-beta&tabs=powershell#response-1

If anyone has any pointers it would be much appreciated. Thanks.

]]> By: Luke Wilkins https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-17710 Thu, 07 Sep 2023 21:49:29 +0000 https://thesysadminchannel.com/?p=3806#comment-17710 Thanks for this. I modified the script to read from a CSV of users and output to a CSV file.
It was the switch statement I was after.
Thank you for providing.

]]> By: Michiel Nijk https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-8544 Thu, 23 Feb 2023 15:19:10 +0000 https://thesysadminchannel.com/?p=3806#comment-8544 The email authmethod is also not a strong authentication method. This is why it’s left in the methods list when MFA is revoked or reset…

]]> By: Rafael Varela https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-7788 Wed, 25 Jan 2023 12:12:56 +0000 https://thesysadminchannel.com/?p=3806#comment-7788 In reply to Chris.

Is seems that you have to import the module:

Import-Module .\Get-MsGraphAuthenticationMethod.ps1

]]> By: Chris https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-7556 Mon, 16 Jan 2023 16:01:17 +0000 https://thesysadminchannel.com/?p=3806#comment-7556 Not sure what I’m doing wrong, but when trying to run this script nothing happens. I don’t even get the pop-up dialog box to sign in.

]]> By: Janio André https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-6599 Mon, 12 Dec 2022 19:30:46 +0000 https://thesysadminchannel.com/?p=3806#comment-6599 In reply to Kevin.

Hi Kevin, I am interesting on your script based on Mark’s.
I have the same request internally and I am searching someting that can help us.
Thanks

]]> By: Paul https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-4267 Thu, 13 Oct 2022 15:51:59 +0000 https://thesysadminchannel.com/?p=3806#comment-4267 In reply to david.

Yes that is correct.

]]> By: david https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-4266 Thu, 13 Oct 2022 15:49:07 +0000 https://thesysadminchannel.com/?p=3806#comment-4266 If the ‘MethodType’ is ‘PasswordAuthentication’ does that mean that MFA is not enabled for that account?

]]> By: Kevin https://thesysadminchannel.com/get-mfa-methods-using-msgraph-api-and-powershell-sdk/#comment-4169 Sun, 09 Oct 2022 23:08:30 +0000 https://thesysadminchannel.com/?p=3806#comment-4169 This was very useful in building a script based on Mark’s question above.
We have over 10k users and needed a report for our InfoSec. It took about 15 hours to run but I was able to return accounts that did not have MFA configured

]]>