Microsoft Graph: Add support for "Require re-register MFA"
Currently, "Require re-register MFA" can only be set https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userdevicesettings#manage-user-authentication-options, or via PowerShell using:
Set-MsolUser -UserPrincipalName username -StrongAuthenticationMethods @()
Please add support for this in the Microsoft Graph API.
34 Comments
- rstolpesCopper Contributor
Any news on this"?
- Carl_LowesCopper Contributor
Any news from someone on this? Definitly looking into a solution for this.
- NidalTBrass Contributor
I think it's about time this one get's done, right?
Basic auth is deprecated. We should have an alternative.
- amariak203Copper Contributor
Also looking for this
- jezscCopper Contributor
Adding in my support for this!
- Sarah2006Copper Contributor
Adding in my support for this!
- CarlJaspersohnCopper Contributor
Adding my support for this!
- RdelimanCopper Contributor
We need this for our support team needs.
Other on same topic:
Graph API to trigger registered MFA verification steps. - Microsoft Tech Community
- cghafourCopper Contributor
This should be highest priority for Microsoft regardless of how many votes it gets here as MSOnline will stop working in October when basic authentication stops working leaving us with no alternative. between now and October Microsoft should have an alternative (such as Graph or V2 AzureAD module). We already updated all our scripts to Graph and V2 AzureAD commands using app registration. We're about 3 months away from the deadline and I'm not going to go back and use basic authentication in order to automate require re-registration for MFA. I'd rather not automate it temporarily and wait for Microsoft to provide a better alternative. Why isn't this a priority for Microsoft when they know the deadline is October is a mystery to me.
- Ron HouetBrass Contributor
Come on Microsoft, you want to get rid of basic auth, so the way with MSOnline is not an option anymore. Get a Graph API going for this.
We want to be able to do this with PowerShell, GUI isn't an option.