Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

PowerShell get Combined SSPR state

Copper Contributor

SSPR state can be retrieved via

 Get-Msoluser -All | where {$_.StrongAuthenticationUserDetails -ne $null} 

but not when using Combined ! Users that have registered questions for Combined SSPR (and MFA) have a null StrongAuthenticationUserDetails value.

 

Any ideas please how one can get a the Combined SSPR state (other than looking at the 30 day log history).

2 Replies
best response confirmed by Paul Day (Copper Contributor)
Solution

Afaik no, the only thing you can do via PowerShell is call the Graph endpoint to fetch the credentialUserRegistrationDetails report: https://docs.microsoft.com/en-us/graph/api/resources/credentialuserregistrationdetails?view=graph-re...

@Vasil Michev that Graph endpoint is great. I didn't know about that. Thanks very much - extremely helpful and appreciated.

 

What I actually was trying to achieve was create a Power BI data set and your pointing me to that Graph endpoint report was PERFECT because I can simply create a Power BI Data Flow pointed to that endpoint and voila, I have my data in Power BI. Awesome :smile:. Now my users can knock themselves out with dashboards.

 

Data Flow is:

  1. OData.Feed("https://graph.microsoft.com/beta/reports/credentialUserRegistrationDetails", null, [Implementation = "2.0"])
  2. Table.TransformColumns(Source, {"authMethods", each Text.Combine(List.Transform(_, Text.From), ","), type text})

 

1 best response

Accepted Solutions
best response confirmed by Paul Day (Copper Contributor)
Solution

Afaik no, the only thing you can do via PowerShell is call the Graph endpoint to fetch the credentialUserRegistrationDetails report: https://docs.microsoft.com/en-us/graph/api/resources/credentialuserregistrationdetails?view=graph-re...

View solution in original post