Microsoft Graph: Add support for "Require re-register MFA"

Microsoft Graph: Add support for "Require re-register MFA"
84

Upvotes

Upvote

 Jan 14 2022
33 Comments (33 New)
New

Currently, "Require re-register MFA" can only be set in the Azure Portal, or via PowerShell using:

 

Set-MsolUser -UserPrincipalName username -StrongAuthenticationMethods @()

 

Please add support for this in the Microsoft Graph API.

Comments
Copper Contributor

Following the above comment the new graph endpoint seems to be 

 

https://graph.microsoft.com/beta/users/{UserID}/authentication/methods/resetTraditionalAuthenticatio...

This returns a 204 when invoked via the Entra ID portal but so far I've been unable to call this endpoint outside of there e.g. postman. I am still trying to figure out which permissions would be required...

 

{
    "error": {
        "code": "accessDenied",
        "message": "Request Authorization failed",
        "innerError": {
            "message": "Request Authorization failed",
            "date": "2024-01-12T09:45:39",
            "request-id": "X",
            "client-request-id": "X"
        }
    }
}

 

 

 

Copper Contributor

Any update? I really need it badly!

Copper Contributor

The new undocumented endpoint is the solution but its in alpha and usage is restricted to whitelisted apps.