MicrosoftWe are using securescore endpoint of graph API in beta version to programatically get data and have noticed several discrepancies which are listed below:
1. The number of element in controlScores of the response varies on daily basis i.e. in the response json, count of elements in controlscores json fluctuates. We were getting 59 elements on 12-November-2018 which reduced to 51 on 14-November-2018. The elements which went missing were - BlockLegacyAuthentication, AltInfoIncomplete, MFARegistration, UserRiskPolicy, SigninRiskPolicy, UserMFA, AdminMFA, SelfServicePasswordReset.
response json -
{"value": [...
"controlScores": [
{...
{
"controlCategory": "Identity",
"controlName": "ManyAdmins", ....
2. We identified that the score data was not reliable for few of the scores calculated. e.x. element with name ManyAdmins had a score of zero as the count of admin was zero, however we had 5 admins for the account. The count and score was correct 2 days back.
API URL: https://graph.microsoft.com/beta/security/secureScores?$top=1
