Forum Discussion
techrunner4eva
Nov 09, 2022Copper Contributor
List of users on MFA that have more than one device under their name
My first time posting anything on any forum tbh. Is it possible to generate a report to see the list of users on MFA that have more than one device under their name? I have scoured the internet bu...
VasilMichev
Nov 09, 2022MVP
Sure, take a look at the authentication methods Graph API endpoints: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethods-overview?view=graph-rest-1.0
For each method, you can query the list of configured devices, where it makes sense. I.e. /authentication/phoneMethods will return the list of phone numbers registered, authentication/microsoftAuthenticatorMethods the list of devices on which Authenticator is configured, etc. Or you can do a /authentication/methods query to get them all.
For each method, you can query the list of configured devices, where it makes sense. I.e. /authentication/phoneMethods will return the list of phone numbers registered, authentication/microsoftAuthenticatorMethods the list of devices on which Authenticator is configured, etc. Or you can do a /authentication/methods query to get them all.
techrunner4eva
Nov 10, 2022Copper Contributor
Thanks for the quick update Vasil. I should have been more specific in relation to how I want the report generated.
Is there anyway to get this done using Powershell Scripts?
Is there anyway to get this done using Powershell Scripts?
- VasilMichevNov 10, 2022MVPThe Microsoft Graph SDK for PowerShell is practically a wrapper for Graph queries, so you can use the same method with it. For example, Get-MgUserAuthenticationMethod.