Configure and Report on Default MFA Method

%3CLINGO-SUB%20id%3D%22lingo-sub-2645804%22%20slang%3D%22en-US%22%3EConfigure%20and%20Report%20on%20Default%20MFA%20Method%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2645804%22%20slang%3D%22en-US%22%3E%3CP%3EUp%20to%20now%2C%20I%20haven't%20found%20a%20way%20to%20list%20or%20set%20the%20default%20method%20of%20Authentication%20programmatically%20via%20PS%20or%20the%20Graph.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlthough%20I%20can%20list%2Fadd%2Fdelete%20methods%20in%20batch%2C%20I%20can't%20seem%20to%20be%20able%20to%20find%20a%20way%20to%20set%20the%20default%20method.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20example%20a%20user%20has%20set%20two%20methods.%3C%2FP%3E%3CP%3E1.%20FIDO2%20key%3C%2FP%3E%3CP%3E2.%20Microsoft%20Authenticator%20notification%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20user%20has%20set%20teh%20MS%20Auth%20app%20as%20the%20default%20and%20the%20company%20policy%20is%20to%20always%20set%20the%20FIDO2%20as%20the%20default%20method.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%2C%20reporting%20on%20this%20aspect%20is%20also%20important.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2645804%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

Up to now, I haven't found a way to list or set the default method of Authentication programmatically via PS or the Graph.

 

Although I can list/add/delete methods in batch, I can't seem to be able to find a way to set the default method.

 

For example a user has set two methods.

1. FIDO2 key

2. Microsoft Authenticator notification

 

The user has set teh MS Auth app as the default and the company policy is to always set the FIDO2 as the default method.

 

Also, reporting on this aspect is also important.

1 Reply