ESC
Type to search...
↑↓ Navigate ↵ Open ESC Close

UserAuthenticationMethod.Read

Export JSON
Export CSV
Copy URL
Print
Delegated Read User Scope

Allows the app to read the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in or otherwise use the signed-in user's authentication methods.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Delegated Permission Admin consent required

Read user authentication methods.

Allows the app to read the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in or otherwise use the signed-in user's authentication methods.

User sees: Allows the app to read your authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like your passwords, or to sign-in or otherwise use your authentication methods.
Permission ID: 1f6b61c5-2f65-4135-9c9f-31c0f8d32b52

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
id String Unique identifier. Read-only.
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation 
{
  "@odata.type": "#microsoft.graph.authentication"
}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.
hardwareOathMethods hardwareOathAuthenticationMethod collection The hardware OATH time-based one-time password (TOTP) devices assigned to a user for authentication.
passwordlessMicrosoftAuthenticatorMethods passwordlessMicrosoftAuthenticatorAuthenticationMethod collection Represents the Microsoft Authenticator Passwordless Phone Sign-in methods registered to a user for authentication.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /me/authentication/emailMethods
GET /me/authentication/emailMethods/{emailMethods-id}
GET /me/authentication/externalAuthenticationMethods
GET /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /me/authentication/fido2Methods
GET /me/authentication/fido2Methods/{id}
GET /me/authentication/methods
GET /me/authentication/methods/{id}
GET /me/authentication/microsoftAuthenticatorMethods
GET /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /me/authentication/passwordMethods
GET /me/authentication/passwordMethods/{passwordMethods-id}
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /me/authentication/platformCredentialMethods
GET /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /me/authentication/qrCodePinMethod/standardQRCode
GET /me/authentication/qrCodePinMethod/temporaryQRCode
GET /me/authentication/softwareOathMethods
GET /me/authentication/softwareOathMethods/{id}
GET /me/authentication/temporaryAccessPassMethods
GET /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /me/authentication/windowsHelloForBusinessMethods
GET /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/emailMethods
GET /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
GET /users/{id | userPrincipalName}/authentication/fido2Methods
GET /users/{id | userPrincipalName}/authentication/fido2Methods/{id}
GET /users/{id | userPrincipalName}/authentication/methods
GET /users/{id | userPrincipalName}/authentication/methods/{id}
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/operations/{id}
GET /users/{id | userPrincipalName}/authentication/passwordMethods
GET /users/{id | userPrincipalName}/authentication/passwordMethods/{passwordMethods-id}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/qrCodePinMethod
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods/{id}
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id}/authentication/qrCodePinMethod/standardQRCode
GET /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
GET /users/{usersId}/authentication/externalAuthenticationMethods
GET /users/{usersId}/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
POST /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
GET /me/authentication/emailMethods
GET /me/authentication/emailMethods/{emailMethods-id}
GET /me/authentication/externalAuthenticationMethods
GET /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /me/authentication/fido2Methods
GET /me/authentication/fido2Methods/{id}
GET /me/authentication/hardwareOathMethods
GET /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
GET /me/authentication/methods
GET /me/authentication/methods/{id}
GET /me/authentication/microsoftAuthenticatorMethods
GET /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /me/authentication/passwordlessMicrosoftAuthenticatorMethods
GET /me/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
GET /me/authentication/passwordMethods
GET /me/authentication/passwordMethods/{passwordMethods-id}
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /me/authentication/platformCredentialMethods
GET /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /me/authentication/qrCodePinMethod
GET /me/authentication/qrCodePinMethod/standardQRCode
GET /me/authentication/qrCodePinMethod/temporaryQRCode
GET /me/authentication/requirements
GET /me/authentication/softwareOathMethods
GET /me/authentication/softwareOathMethods/{id}
GET /me/authentication/temporaryAccessPassMethods
GET /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /me/authentication/windowsHelloForBusinessMethods
GET /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/emailMethods
GET /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
GET /users/{id | userPrincipalName}/authentication/fido2Methods
GET /users/{id | userPrincipalName}/authentication/fido2Methods/{id}
GET /users/{id | userPrincipalName}/authentication/methods
GET /users/{id | userPrincipalName}/authentication/methods/{id}
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/operations/{id}
GET /users/{id | userPrincipalName}/authentication/passwordlessMicrosoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
GET /users/{id | userPrincipalName}/authentication/passwordMethods
GET /users/{id | userPrincipalName}/authentication/passwordMethods/{passwordMethods-id}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/requirements
GET /users/{id | userPrincipalName}/authentication/signInPreferences
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods/{id}
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id}/authentication/qrCodePinMethod
GET /users/{id}/authentication/qrCodePinMethod/standardQRCode
GET /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
GET /users/{usersId}/authentication/externalAuthenticationMethods
GET /users/{usersId}/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /users/{usersId}/authentication/hardwareOathMethods
GET /users/{usersId}/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
POST /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgUserAuthenticationEmailMethod /me/authentication/emailMethods
List emailMethods
Get-MgUserAuthenticationEmailMethod /me/authentication/emailMethods/{emailMethods-id}
Get emailAuthenticationMethod
Get-MgUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods
List externalAuthenticationMethod objects
Get-MgUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
Get externalAuthenticationMethod
Get-MgUserAuthenticationFido2Method /me/authentication/fido2Methods
List fido2AuthenticationMethod
Get-MgUserAuthenticationFido2Method /me/authentication/fido2Methods/{id}
Get fido2AuthenticationMethod
Get-MgUserAuthenticationMethod /me/authentication/methods
List methods
Get-MgUserAuthenticationMethod /me/authentication/methods/{id}
Get authenticationMethod
Get-MgUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods
List microsoftAuthenticatorAuthenticationMethods
Get-MgUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
Get microsoftAuthenticatorAuthenticationMethod
Get-MgUserAuthenticationOperation /users/{id | userPrincipalName}/authentication/operations/{id}
Get longRunningOperation
Get-MgUserAuthenticationPasswordMethod /me/authentication/passwordMethods
List passwordMethods
Get-MgUserAuthenticationPasswordMethod /me/authentication/passwordMethods/{passwordMethods-id}
Get passwordAuthenticationMethod
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
Get-MgUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods
List platformCredentialAuthenticationMethods
Get-MgUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
Get platformCredentialAuthenticationMethod
Get-MgUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods
List softwareOathMethods
Get-MgUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods/{id}
Get softwareOathAuthenticationMethod
Get-MgUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods
List temporaryAccessPassMethods
Get-MgUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
Get temporaryAccessPassAuthenticationMethod
Get-MgUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods
List windowsHelloForBusinessAuthenticationMethods
Get-MgUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
Get windowsHelloForBusinessAuthenticationMethod
New-MgUserAuthenticationTemporaryAccessPassMethod /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Create temporaryAccessPassMethod
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaExternalIndustryDataOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaIdentityGovernanceRoleManagementAlertOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaUserAuthenticationEmailMethod /me/authentication/emailMethods
List emailAuthenticationMethods
Get-MgBetaUserAuthenticationEmailMethod /me/authentication/emailMethods/{emailMethods-id}
Get emailAuthenticationMethod
Get-MgBetaUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods
List externalAuthenticationMethod objects
Get-MgBetaUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
Get externalAuthenticationMethod
Get-MgBetaUserAuthenticationFido2Method /me/authentication/fido2Methods
List fido2AuthenticationMethod
Get-MgBetaUserAuthenticationFido2Method /me/authentication/fido2Methods/{id}
Get fido2AuthenticationMethod
Get-MgBetaUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods
List hardwareOathAuthenticationMethod objects
Get-MgBetaUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
Get hardwareOathAuthenticationMethod
Get-MgBetaUserAuthenticationMethod /me/authentication/methods
List methods
Get-MgBetaUserAuthenticationMethod /me/authentication/methods/{id}
Get authenticationMethod
Get-MgBetaUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods
List microsoftAuthenticatorAuthenticationMethods
Get-MgBetaUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
Get microsoftAuthenticatorAuthenticationMethod
Get-MgBetaUserAuthenticationOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaUserAuthenticationPasswordlessMicrosoftAuthenticatorMethod /me/authentication/passwordlessMicrosoftAuthenticatorMethods
List passwordlessMicrosoftAuthenticatorAuthenticationMethods
Get-MgBetaUserAuthenticationPasswordlessMicrosoftAuthenticatorMethod /me/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
Get passwordlessMicrosoftAuthenticatorAuthenticationMethod
Get-MgBetaUserAuthenticationPasswordMethod /me/authentication/passwordMethods
List passwordMethods
Get-MgBetaUserAuthenticationPasswordMethod /me/authentication/passwordMethods/{passwordMethods-id}
Get passwordAuthenticationMethod
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
Get-MgBetaUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods
List platformCredentialAuthenticationMethods
Get-MgBetaUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
Get platformCredentialAuthenticationMethod
Get-MgBetaUserAuthenticationQrCodePinMethod /me/authentication/qrCodePinMethod
Get qrCodePinAuthenticationMethod
Get-MgBetaUserAuthenticationQrCodePinMethodStandardQrCode /me/authentication/qrCodePinMethod/standardQRCode
Get qrCode
Get-MgBetaUserAuthenticationRequirement /users/{id | userPrincipalName}/authentication/signInPreferences
Get authentication states
Get-MgBetaUserAuthenticationSignInPreference /users/{id | userPrincipalName}/authentication/signInPreferences
Get authentication states
Get-MgBetaUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods
List softwareOathMethods
Get-MgBetaUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods/{id}
Get softwareOathAuthenticationMethod
Get-MgBetaUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods
List temporaryAccessPassMethods
Get-MgBetaUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
Get temporaryAccessPassAuthenticationMethod
Get-MgBetaUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods
List windowsHelloForBusinessAuthenticationMethods
Get-MgBetaUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
Get windowsHelloForBusinessAuthenticationMethod
New-MgBetaUserAuthenticationTemporaryAccessPassMethod /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Create temporaryAccessPassMethod

Code Examples

C# / .NET SDK
Get authenticationMethod
View official example on Microsoft Learn
// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Me.Authentication.Methods["{authenticationMethod-id}"].GetAsync();
JavaScript
Get authenticationMethod
View official example on Microsoft Learn
const options = {
	authProvider,
};

const client = Client.init(options);

let authenticationMethod = await client.api('/me/authentication/methods/{id}')
	.get();
PowerShell
Get authenticationMethod
View official example on Microsoft Learn
Import-Module Microsoft.Graph.Identity.SignIns
# A UPN can also be used as -UserId.
Get-MgUserAuthenticationMethod -UserId $userId -AuthenticationMethodId $authenticationMethodId
Python
Get authenticationMethod
View official example on Microsoft Learn
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.me.authentication.methods.by_authentication_method_id('authenticationMethod-id').get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Delegated permissions and search for UserAuthenticationMethod.Read

4

Grant Admin Consent

This delegated permission requires admin consent.