Forum Discussion

Simonas2210's avatar
Simonas2210
Copper Contributor
Dec 17, 2025

Security alerts Graph API and MFA

Hello,

Does anyone know if https://learn.microsoft.com/en-us/graph/api/resources/partner-security-partnersecurityalert-api-overview?view=graph-rest-beta

Security alerts works with app only method  (app + cert or app + secret )? Currently i successfully login to graph using both methods

Welcome to Microsoft Graph!
Connected via apponly access using "ID number"

Then i request to get alerts and i get error code:
WARNING: Error body: {"error":{"code":"UnknownError","message":"{\"Error\":{\"Code\":\"Unauthorized_MissingMFA\",\"Message\":\"MFA is required for this request. The provided authentication token does not have MFA

I found that old API worked with app+user credential only but it's not mentioned in new one about this restriction.

alerts
apis
Graph Security API

1 Reply

  • UmerKhalid's avatar
    UmerKhalid
    Occasional Reader
    Dec 17, 2025

    It looks like the new Security Alerts Graph API requires MFA for certain requests, which is why your app-only authentication (app + cert or app + secret) is returning the Unauthorized_MissingMFA error. Even if old APIs worked with app + user credentials, the updated API enforces MFA for security-sensitive operations.

Resources