ESC
Type to search...
↑↓ Navigate ↵ Open ESC Close

UserAuthenticationMethod.Read.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read All Resources

Allows the app to read authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read all users' authentication methods

Allows the app to read authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

Permission ID: 38d9df27-64da-44fd-b7c5-a6fbac20248f
Delegated Permission Admin consent required

Read all users' authentication methods

Allows the app to read authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

User sees: Allows the app to read authentication methods of all users you have access to in your organization. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.
Permission ID: aec28ec7-4d02-4e8c-b864-50163aea77eb

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
id String Unique identifier. Read-only.
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation 
{
  "@odata.type": "#microsoft.graph.authentication"
}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.
hardwareOathMethods hardwareOathAuthenticationMethod collection The hardware OATH time-based one-time password (TOTP) devices assigned to a user for authentication.
passwordlessMicrosoftAuthenticatorMethods passwordlessMicrosoftAuthenticatorAuthenticationMethod collection Represents the Microsoft Authenticator Passwordless Phone Sign-in methods registered to a user for authentication.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /me/authentication/emailMethods
GET /me/authentication/emailMethods/{emailMethods-id}
GET /me/authentication/externalAuthenticationMethods
GET /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /me/authentication/fido2Methods
GET /me/authentication/fido2Methods/{id}
GET /me/authentication/methods
GET /me/authentication/methods/{id}
GET /me/authentication/microsoftAuthenticatorMethods
GET /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /me/authentication/passwordMethods
GET /me/authentication/passwordMethods/{passwordMethods-id}
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /me/authentication/platformCredentialMethods
GET /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /me/authentication/qrCodePinMethod/standardQRCode
GET /me/authentication/qrCodePinMethod/temporaryQRCode
GET /me/authentication/softwareOathMethods
GET /me/authentication/softwareOathMethods/{id}
GET /me/authentication/temporaryAccessPassMethods
GET /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /me/authentication/windowsHelloForBusinessMethods
GET /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/emailMethods
GET /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
GET /users/{id | userPrincipalName}/authentication/fido2Methods
GET /users/{id | userPrincipalName}/authentication/fido2Methods/{id}
GET /users/{id | userPrincipalName}/authentication/methods
GET /users/{id | userPrincipalName}/authentication/methods/{id}
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/operations/{id}
GET /users/{id | userPrincipalName}/authentication/passwordMethods
GET /users/{id | userPrincipalName}/authentication/passwordMethods/{passwordMethods-id}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/qrCodePinMethod
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods/{id}
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id}/authentication/qrCodePinMethod/standardQRCode
GET /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
GET /users/{usersId}/authentication/externalAuthenticationMethods
GET /users/{usersId}/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
POST /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
GET /me/authentication/emailMethods
GET /me/authentication/emailMethods/{emailMethods-id}
GET /me/authentication/externalAuthenticationMethods
GET /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /me/authentication/fido2Methods
GET /me/authentication/fido2Methods/{id}
GET /me/authentication/hardwareOathMethods
GET /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
GET /me/authentication/methods
GET /me/authentication/methods/{id}
GET /me/authentication/microsoftAuthenticatorMethods
GET /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /me/authentication/passwordlessMicrosoftAuthenticatorMethods
GET /me/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
GET /me/authentication/passwordMethods
GET /me/authentication/passwordMethods/{passwordMethods-id}
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /me/authentication/platformCredentialMethods
GET /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /me/authentication/qrCodePinMethod
GET /me/authentication/qrCodePinMethod/standardQRCode
GET /me/authentication/qrCodePinMethod/temporaryQRCode
GET /me/authentication/softwareOathMethods
GET /me/authentication/softwareOathMethods/{id}
GET /me/authentication/temporaryAccessPassMethods
GET /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /me/authentication/windowsHelloForBusinessMethods
GET /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/emailMethods
GET /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
GET /users/{id | userPrincipalName}/authentication/fido2Methods
GET /users/{id | userPrincipalName}/authentication/fido2Methods/{id}
GET /users/{id | userPrincipalName}/authentication/methods
GET /users/{id | userPrincipalName}/authentication/methods/{id}
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/operations/{id}
GET /users/{id | userPrincipalName}/authentication/passwordlessMicrosoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
GET /users/{id | userPrincipalName}/authentication/passwordMethods
GET /users/{id | userPrincipalName}/authentication/passwordMethods/{passwordMethods-id}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods/{id}
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id}/authentication/qrCodePinMethod
GET /users/{id}/authentication/qrCodePinMethod/standardQRCode
GET /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
GET /users/{usersId}/authentication/externalAuthenticationMethods
GET /users/{usersId}/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /users/{usersId}/authentication/hardwareOathMethods
GET /users/{usersId}/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
POST /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgUserAuthenticationEmailMethod /me/authentication/emailMethods
List emailMethods
Get-MgUserAuthenticationEmailMethod /me/authentication/emailMethods/{emailMethods-id}
Get emailAuthenticationMethod
Get-MgUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods
List externalAuthenticationMethod objects
Get-MgUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
Get externalAuthenticationMethod
Get-MgUserAuthenticationFido2Method /me/authentication/fido2Methods
List fido2AuthenticationMethod
Get-MgUserAuthenticationFido2Method /me/authentication/fido2Methods/{id}
Get fido2AuthenticationMethod
Get-MgUserAuthenticationMethod /me/authentication/methods
List methods
Get-MgUserAuthenticationMethod /me/authentication/methods/{id}
Get authenticationMethod
Get-MgUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods
List microsoftAuthenticatorAuthenticationMethods
Get-MgUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
Get microsoftAuthenticatorAuthenticationMethod
Get-MgUserAuthenticationOperation /users/{id | userPrincipalName}/authentication/operations/{id}
Get longRunningOperation
Get-MgUserAuthenticationPasswordMethod /me/authentication/passwordMethods
List passwordMethods
Get-MgUserAuthenticationPasswordMethod /me/authentication/passwordMethods/{passwordMethods-id}
Get passwordAuthenticationMethod
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
Get-MgUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods
List platformCredentialAuthenticationMethods
Get-MgUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
Get platformCredentialAuthenticationMethod
Get-MgUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods
List softwareOathMethods
Get-MgUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods/{id}
Get softwareOathAuthenticationMethod
Get-MgUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods
List temporaryAccessPassMethods
Get-MgUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
Get temporaryAccessPassAuthenticationMethod
Get-MgUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods
List windowsHelloForBusinessAuthenticationMethods
Get-MgUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
Get windowsHelloForBusinessAuthenticationMethod
New-MgUserAuthenticationTemporaryAccessPassMethod /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Create temporaryAccessPassMethod
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaExternalIndustryDataOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaIdentityGovernanceRoleManagementAlertOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaUserAuthenticationEmailMethod /me/authentication/emailMethods
List emailAuthenticationMethods
Get-MgBetaUserAuthenticationEmailMethod /me/authentication/emailMethods/{emailMethods-id}
Get emailAuthenticationMethod
Get-MgBetaUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods
List externalAuthenticationMethod objects
Get-MgBetaUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
Get externalAuthenticationMethod
Get-MgBetaUserAuthenticationFido2Method /me/authentication/fido2Methods
List fido2AuthenticationMethod
Get-MgBetaUserAuthenticationFido2Method /me/authentication/fido2Methods/{id}
Get fido2AuthenticationMethod
Get-MgBetaUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods
List hardwareOathAuthenticationMethod objects
Get-MgBetaUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
Get hardwareOathAuthenticationMethod
Get-MgBetaUserAuthenticationMethod /me/authentication/methods
List methods
Get-MgBetaUserAuthenticationMethod /me/authentication/methods/{id}
Get authenticationMethod
Get-MgBetaUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods
List microsoftAuthenticatorAuthenticationMethods
Get-MgBetaUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
Get microsoftAuthenticatorAuthenticationMethod
Get-MgBetaUserAuthenticationOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaUserAuthenticationPasswordlessMicrosoftAuthenticatorMethod /me/authentication/passwordlessMicrosoftAuthenticatorMethods
List passwordlessMicrosoftAuthenticatorAuthenticationMethods
Get-MgBetaUserAuthenticationPasswordlessMicrosoftAuthenticatorMethod /me/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
Get passwordlessMicrosoftAuthenticatorAuthenticationMethod
Get-MgBetaUserAuthenticationPasswordMethod /me/authentication/passwordMethods
List passwordMethods
Get-MgBetaUserAuthenticationPasswordMethod /me/authentication/passwordMethods/{passwordMethods-id}
Get passwordAuthenticationMethod
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
Get-MgBetaUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods
List platformCredentialAuthenticationMethods
Get-MgBetaUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
Get platformCredentialAuthenticationMethod
Get-MgBetaUserAuthenticationQrCodePinMethod /me/authentication/qrCodePinMethod
Get qrCodePinAuthenticationMethod
Get-MgBetaUserAuthenticationQrCodePinMethodStandardQrCode /me/authentication/qrCodePinMethod/standardQRCode
Get qrCode
Get-MgBetaUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods
List softwareOathMethods
Get-MgBetaUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods/{id}
Get softwareOathAuthenticationMethod
Get-MgBetaUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods
List temporaryAccessPassMethods
Get-MgBetaUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
Get temporaryAccessPassAuthenticationMethod
Get-MgBetaUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods
List windowsHelloForBusinessAuthenticationMethods
Get-MgBetaUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
Get windowsHelloForBusinessAuthenticationMethod
New-MgBetaUserAuthenticationTemporaryAccessPassMethod /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Create temporaryAccessPassMethod

Code Examples

C# / .NET SDK
Get authenticationMethod
View official example on Microsoft Learn
// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Me.Authentication.Methods["{authenticationMethod-id}"].GetAsync();
JavaScript
Get authenticationMethod
View official example on Microsoft Learn
const options = {
	authProvider,
};

const client = Client.init(options);

let authenticationMethod = await client.api('/me/authentication/methods/{id}')
	.get();
PowerShell
Get authenticationMethod
View official example on Microsoft Learn
Import-Module Microsoft.Graph.Identity.SignIns
# A UPN can also be used as -UserId.
Get-MgUserAuthenticationMethod -UserId $userId -AuthenticationMethodId $authenticationMethodId
Python
Get authenticationMethod
View official example on Microsoft Learn
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.me.authentication.methods.by_authentication_method_id('authenticationMethod-id').get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for UserAuthenticationMethod.Read.All

4

Grant Admin Consent

Application permissions always require admin consent.